ISO 27001 Information Security Support
Customer asking for ISO 27001 or need a clearer approach to protecting business information?
AA Compliance Compass Ltd provides practical ISO/IEC 27001 information security management-system support for SMEs, start-ups and contractors. I help you organise the policies, processes and evidence your business needs, with support tailored to how you work.
Book your FREE 30-minute consultation
Practical Support for Your Business
- Review your current arrangements and identify gaps against ISO/IEC 27001.
- Define the scope of your Information Security Management System (ISMS) and clarify responsibilities.
- Support information-security risk assessments, treatment plans and the Statement of Applicability.
- Develop practical policies, procedures, registers and document controls.
- Help introduce the system and organise staff awareness and training records.
- Carry out internal audits, prepare management reviews and support corrective actions.
- Organise evidence and prepare for an independent certification assessment.
A System That Fits the Way You Work
ISO/IEC 27001 provides a framework for managing information-security risks. A useful system needs to reflect the information you handle, the people and suppliers involved, and the controls you use in everyday work.
I can help you turn requirements into clear responsibilities, manageable processes and useful records. Where technical security work is needed, I can help define the requirement for your IT provider or an appropriate specialist.
Qualified Support with Hands-On Business Experience
I’m Anne Ashman, founder of AA Compliance Compass Ltd and a recently qualified ISO 27001 Information Security Lead Auditor. I combine this qualification with ISO management-system experience and hands-on commercial and operational management experience.
My approach focuses on practical implementation, clear priorities and evidence of how your arrangements work.
Frequently Asked Questions
What is ISO 27001?
ISO/IEC 27001 is an international standard for information security management systems. It helps organisations manage risks to the confidentiality, integrity and availability of information through a structured approach.
Who is this service for?
I support SMEs, start-ups and contractors who need practical information-security management arrangements, are responding to customer requirements or are preparing for ISO 27001 certification.
Can you improve an existing system?
Yes. I can review your current documentation and processes, identify gaps or duplication and help organise a system that is easier to use and maintain.
Can you help with risk assessments and a Statement of Applicability?
Yes. I can help structure your risk-assessment and treatment documentation and organise the Statement of Applicability around your agreed scope and controls. Your business remains responsible for implementing its arrangements and making its risk decisions.
Do you provide technical cybersecurity testing or IT support?
This service focuses on the management system, documentation, implementation and audit preparation. Technical work such as penetration testing, system configuration or specialist security assessments should be completed by an appropriate technical provider.
Can you issue or guarantee ISO certification?
No. I provide consultancy, implementation and audit-readiness support. Formal certification is issued by an independent certification body, and approval depends on the assessment of your implemented system.
Can information security be integrated with our other ISO systems?
Yes. Shared processes such as document control, internal audits, corrective actions and management reviews can be coordinated with your existing management systems, while retaining the information-security requirements.
How do I get started?
Book a FREE 30-minute consultation with Anne. We’ll discuss your customer requirements, current arrangements, deadline and the support you need next. No obligation.