01
Assessment
1 legal entity + 1 primary service
USD 2.400One-time
A structured view of your current situation and a prioritized action plan.
- 3 · interviews
- 15 · documents
- 25 · evidence items
ISO 27001 services
Understand gaps, prepare the audit and keep follow-up in motion
Scoped, outcome-oriented services to understand gaps, prepare for an audit, close findings, build the ISMS foundation, or keep follow-up in motion.
From
USD 2.400 One-time
Assessment: A structured view of your current situation and a prioritized action plan. Reference price, subject to scope validation.
- 01Defined scope
Each plan states what is included and where it stops.
- 02Visible prices
The reference amount is shown on every plan.
- 03Validation first
Scope is confirmed before the proposal.
01
ISO 27001 services
Each service states its perimeter, its deliverables, and its limit. The price applies to the standard scope.
02
Audit preparation
1 entity + 1 scope + 1 standard
USD 3.250One-time
An assessment of the preparation level, the blockers, and the actions still needed before the audit.
- 4 · owners
- 30 · evidence items
- 1 · drill
03
Remediation
1 domain + up to 3 related findings
USD 2.650One-time
Clear actions, owners, and closure criteria for a small set of related findings.
- 3 · findings
- 2 · workshops
- 4 · deliverables
04
ISMS foundations
1 legal entity + 1 primary service
USD 7.200One-time
A recognizable, usable document base to start implementation with clear order and priorities.
- 1 · ISMS manual
- 3 · procedures
- 30 · assets
05
Monthly follow-up
1 scope + 1 standard already known
USD 1.320 / monthMonthly service
Monthly visibility of actions, evidence, blockers, and pending decisions.
- 90 · minutes
- 12 · evidence items
- 8 · actions
Choosing a plan shows its scope. Requesting it opens the contact form with that selection and does not confirm the purchase.
Selected plan
ISO 27001 assessment + action plan
You do not yet have a clear view of your ISO 27001 gaps or where to start.
USD 2.400 One-time
A structured view of your current situation and a prioritized action plan.
What is included
- Structured review against ISO 27001 on the agreed perimeter.
- Document and evidence review.
- Up to 3 interviews with key owners.
- Assessment of clauses 4–10 and review of Annex A.
- Prioritization of gaps and actions.
Delivery: 15 business days
Exclusions are part of the scope. No service implies a certification guarantee.
Detailed comparison
Swipe sideways to see every plan.
| Item | Assessment | Audit preparation | Remediation | ISMS foundations | Monthly follow-up |
|---|---|---|---|---|---|
| Price | USD 2.400 | USD 3.250 | USD 2.650 | USD 7.200 | USD 1.320 / month |
| Payment | One-time | One-time | One-time | One-time | Monthly service |
| Scope | 1 legal entity + 1 primary service | 1 entity + 1 scope + 1 standard | 1 domain + up to 3 related findings | 1 legal entity + 1 primary service | 1 scope + 1 standard already known |
| Result | A structured view of your current situation and a prioritized action plan. | An assessment of the preparation level, the blockers, and the actions still needed before the audit. | Clear actions, owners, and closure criteria for a small set of related findings. | A recognizable, usable document base to start implementation with clear order and priorities. | Monthly visibility of actions, evidence, blockers, and pending decisions. |
| Delivery | 15 business days | Timing to be confirmed | Bounded project | Delivery by milestones | Monthly |
| Includes | Structured review against ISO 27001 on the agreed perimeter. | Confirmation of the audit scope and context. | Confirmation of cause, impact, and closure criterion. | ISMS manual: context, scope, interested parties, governance, roles, objectives, document architecture, evalua… | Monthly follow-up meeting. |
Reference prices for the standard scope. The final scope is validated before the commercial proposal. Taxes, cloud consumption, third-party licenses and other external costs are not included unless expressly stated.
The proposal confirms in writing what is reviewed, what is delivered, and what stays out before any technical work is committed.
02
What this service includes
The proposal confirms in writing what is reviewed, what is delivered, and what stays out before any technical work is committed.
What you buy
Entity, service or scope, concrete limits, and entry conditions.
What you receive
Named, traceable deliverables, not an open consulting retainer.
Where it ends
Exclusions are part of the scope. No service implies a certification guarantee.
- Audit or certification.
- Implementation or technical remediation.
- Penetration testing.
- Rebuilding inventories or evidence from scratch.
- Creating or rewriting the ISMS.
- Generating historical evidence.
03
How it works
Not every organization needs to start with a full implementation. Identify your situation and go straight to the service that fits.
- 01
Choose the level
Pick the plan that matches the size and the decision you need to make.
- 02
We validate the scope
We confirm the starting point and the conditions of the published plan.
- 03
We do the agreed work
The work stays inside the scope of the plan you request.
- 04
You receive the result
You receive the deliverables defined for that plan.
The proposal confirms in writing what is reviewed, what is delivered, and what stays out before any technical work is committed.
OpsAnalytics experience
The service sets the next step.
Published cases show how OpsAnalytics supports architecture, operations and the decisions that follow.
04
Frequently asked questions
The questions that most often decide which service fits.
What does “1 legal entity + 1 primary service” mean?
The assessment or project is scoped to one company and one coherent primary service, product, or line, for example a SaaS platform or a cloud service. If there are several companies or materially different environments, the scope is re-estimated.
Does OPS certify ISO 27001?
No. These services help assess, prepare, structure, or improve the ISMS. Certification belongs to an independent certification body.
What happens if my case exceeds the standard service limits?
It is identified before work starts, and we propose a re-estimate, an additional service, or a tailored project. The scope is not expanded silently.
What is the difference between Assessment and Audit preparation?
The assessment shows where you are and what to prioritize. Audit preparation starts from an existing ISMS and checks whether documentation, controls, and evidence are sufficiently prepared for a specific audit.
Not sure which plan you need?
Tell us about your starting point. We will help you identify the right plan and confirm its scope.