Cyber Resilience & Supplier Assurance
18+ yearsSenior practitioner experience
Independent assuranceNever over work IG-Smart managed or delivered
Global audit deliveryInternational assurance and audit experience
IG-Smart supports ISO/IEC 27001 readiness, governance, remediation and assurance preparation. Certification is awarded by an independent accredited certification body, not by IG-Smart.
For technology, SaaS and RegTech suppliers, and any organisation whose customers, tenders or Board now expect ISO/IEC 27001.
Enterprise customers and procurement teams increasingly ask for ISO/IEC 27001. The risk is building an ISMS that is too heavy to run, or too thin to pass an independent audit.
IG-Smart defines a sensible scope, assesses your current position against the standard, prioritises the gaps, helps build the governance, risk and control arrangements, and tests whether the evidence will stand up before your certification body arrives.
Readiness support improves your position; it does not guarantee certification. The certification audit and decision rest with the accredited certification body you appoint.
The readiness path
IG-Smart provides readiness, implementation support and assurance preparation. The certification audit and award are carried out only by an independent accredited certification body. Where IG-Smart has helped implement an ISMS, it does not also act as its independent internal auditor in the same cycle.
When organisations engage us
What the service covers
How we deliver
Assess
Scope the ISMS and assess the current position.
Build
Put governance, risk treatment, controls and documentation in place.
Manage
Track remediation and evidence until the ISMS is operating.
Assure
Review readiness and prepare for the certification audit.
Improve
Support surveillance-audit preparation and continual improvement, where agreed.
Scope boundaries
Sample outputs
Representative reports, registers and records, so you can picture the output before you engage.
Illustrative structure — not a client document. Examples show the type, format and level of detail clients may receive. Exact outputs depend on the agreed scope.
Illustrative output
Position against each clause and Annex A theme, with the material gaps and audit significance.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Illustrative output
Every gap with owner, action, effort, target date and status.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Illustrative output
Who owns, approves, operates and reviews each part of the ISMS.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Illustrative output
Required evidence per requirement, its location, owner and audit readiness.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Illustrative output
Risks, chosen treatment, applicable controls and their implementation status.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Illustrative output
Overall readiness, residual gaps, decisions needed and a recommended audit window.
Likely format
The structure, format and level of detail depend on the agreed scope. This is not a client document.
Relevant evidence
Jigsaw Create is direct ISO/IEC 27001 readiness evidence. The other cases show related security governance and assurance capability and are not presented as ISO/IEC 27001 readiness engagements.
Named client · Technology / SaaS / RegTech
ISO/IEC 27001 readiness, penetration testing and training
ISO/IEC 27001 readiness and cyber assurance
Anonymised engagement
Three-stage governance and audit-readiness plan
Audit-ready UK policies ahead of a third-party maturity assessment
Named client · Higher Education / Research
IG audit, improvement plan, training and physical-security audit
Helped shape and focus the final DSPT submission
Evidence relevance
Featured ISO/IEC 27001 Readiness evidence
Jigsaw Create
IG-Smart provided ISO/IEC 27001 readiness and implementation support, penetration testing and security awareness training to Jigsaw Create, a RegTech start-up selling to enterprises. Jigsaw Create then achieved certification through BSI's independent certification process. BSI certified Jigsaw Create; it does not endorse IG-Smart.
View case studyRelevant security governance & assurance experience
A FTSE 100 organisation
Security maturity assessment and audit readiness for a FTSE 100 organisation; not an ISO/IEC 27001 readiness engagement.
View case studyRelevant security governance & assurance experience
UCL
Information governance and assurance work at UCL; not an ISO/IEC 27001 readiness engagement.
View case studyYour IG-Smart team
Subject-matter expertise is paired with a clear client and programme contact from initial scoping through delivery.
Subject-matter expert
CEO and Founder
Governance, risk and assurance specialist with more than 18 years' experience spanning privacy, cyber resilience, AI governance, digital transformation, healthcare and complex regulated organisations.
View profile
Subject-matter expert
Senior Cyber Security Consultant
Cybersecurity specialist with 10+ years' experience and founder of Africahackon, combining security engineering and technical assurance with expertise in cyber governance, resilience, vulnerability management and organisational risk.
View profile
Client & programme contact
Head of Client & Programme Success
A key point of contact from prospective-client scoping through programme and project delivery, coordinating practitioners, workstreams and client stakeholders.
View profileRelated needs
Need senior security leadership after certification?
Cyber Resilience & Supplier AssuranceCustomers asking about your suppliers too?
Managed Supplier AssuranceMoving customer data across borders?
International Data Transfer AssuranceInvestment
Broader readiness and implementation programmes are scoped to requirement. Scope, deliverables, assumptions and fees are agreed in writing before work begins.
Talk to a Senior Practitioner How engagements & investment work
Questions
No. IG-Smart prepares organisations for certification. The certification audit and decision are made by an independent accredited certification body that you appoint.
No. It reduces the risk of surprises by testing your ISMS and evidence beforehand, but the outcome rests with the certification body.
ISO/IEC 27001:2022, with Annex A controls aligned to ISO/IEC 27002:2022.
IG-Smart operates its own certified ISMS, so the team understands running one day to day. It is IG-Smart's own certification, separate from client outcomes.
Yes, where independence allows. IG-Smart does not internally audit an ISMS it helped implement in the same cycle.
Next step