Annex A
6 min read
How many controls are in Annex A?
ISO 27001:2022 Annex A has 93 controls in 4 themes, down from 114 in 14 domains. See the full breakdown, the 11 new controls, and what changed.
Read the guideISO 27001 guides
28 guides
Working in ISO
How much do ISO consultants charge?
ISO 27001 consultants in the UK charge £800-£1,500+ per day. Full project fees range from £5k for a micro firm to £80k+ for larger organisations.
7 min read
Cost
How much does an ISO 27001 certification cost?
ISO 27001 certification costs $10,000-$50,000 for a small company. An auditor breaks down the four cost buckets and DIY vs consultant routes.
7 min read
Cost
How much does ISO 27001 certification cost in the UK?
UK ISO 27001 certification body fees run £4,000 to £15,000 for the initial audit. A lead auditor on day rates, audit-day maths and what CBs charge.
7 min read
Cost
How much does ISO 27001 cost in the UK?
ISO 27001 costs a small UK company £8,000 to £20,000 in year one. A lead auditor breaks down certification body fees, day rates, consultants and tooling.
8 min read
Cost
How much does ISO 27001 cost?
ISO 27001 costs $10,000 to $50,000 for a small company in year one, globally. An auditor breaks down internal time, CB fees, consultants and tooling.
7 min read
Cost
How much does it cost to get ISO 27001 certified?
ISO 27001 certification costs £8,000 to £40,000 for a small UK company. Phase-by-phase budget from gap analysis to recertification.
8 min read
Cost
How much does the ISO 27001 exam cost?
ISO 27001 Lead Auditor and Lead Implementer exams cost £1,200 to £3,000 in the UK, bundled with a five-day course. Full breakdown by qualification type.
5 min read
Working in ISO
How to become an ISO 27001 consultant
Become an ISO 27001 consultant: qualifications, certifications, experience path and day rates. A practitioner's guide to an ISMS consulting career.
8 min read
Foundations
How to get ISO 27001 certification in the UK?
A step-by-step guide to ISO 27001 certification in the UK, from scoping your ISMS to passing your Stage 2 audit with a UKAS-accredited body.
8 min read
Certification, without the drag.
A process built for how modern teams actually work, run by tech-first auditors, and honest about what you do and don't need.
