Skip to main content
OneX Security⁠
Get in touch
OneX Security⁠

Select language

Discuss an assessment

Cybersecurity Consulting

Target standard
ISO/IEC 27001

A sustainable security program requires clear ownership and decisions that reflect the organization’s resources and obligations. We review your current position, identify priority gaps and develop a phased plan for governance, processes and security capabilities. Advisory work supports audit preparation without guaranteeing certification.

Discuss an assessment

Common challenges

  • Unclear priorities and investment decisions

    There is no dedicated security staff, and it is unclear which risks are most urgent or where the budget should go.

  • Compliance pressure

    Clients, partners, or regulators ask for ISO 27001 or other certifications, or for proof of security.

  • Gap between policy and practice

    Policies exist on paper but are not applied in day-to-day development and operations.

  • Low staff security awareness

    Phishing emails, weak passwords, careless data sharing: people are often the weakest link.

Scope

  1. Security posture assessment and gap analysis
  2. Security program and roadmap planning
  3. ISO 27001 and other compliance guidance
  4. Security policy and process development
  5. Staff security awareness and secure development training

Assessment approach

  1. 1Current-state review

    Through interviews and document review, we learn about your business, systems, and existing security measures.

  2. 2Gap analysis

    We compare your current state with the target standard or best practice to identify gaps and priorities.

  3. 3Planning

    We draw up a phased security plan that fits your budget and resources.

  4. 4Implementation support

    We help you write policy documents, build processes, and prepare for the certification audit.

  5. 5Ongoing support

    We stay on as long-term advisors and adjust the plan as your business changes.

Assessment deliverables

Tailored security plan
A security plan and implementation roadmap based on your business and compliance goals.
Compliance guidance
Gap analysis, management system documentation, and certification audit preparation.
Security training
Tiered training for management, development teams, and all staff.
Long-term advisory support
Ongoing security advice and support, as agreed.

When this service is relevant

  • Your company is growing fast and needs structured security management
  • You are preparing for ISO 27001 or a similar certification
  • Clients or partners ask for proof of security compliance
  • You want to raise security awareness across your team

Common engagement questions

Can you get us ISO 27001 certified?

Certificates are issued by independent certification bodies after their own audit. Our role is guidance: gap analysis, management system documentation, and audit preparation, so that you go into the certification audit ready.

We are a small company. Do we still need security planning?

Yes, but the approach is different. A small team has even more reason to spend limited resources on the most critical risks, so we size the plan to your company and keep it lightweight and workable.

Can the training be customized?

Yes. We tailor the content to the participants’ roles and your company’s situation, for example secure coding training for development teams.

Explore related services

Define the right scope for your next assessment.

Tell us which systems and business priorities matter. We will discuss the assessment approach, required authorization and expected deliverables.

Discuss an assessment

Read the authorization and responsibility notice before submitting an enquiry.