After the Focus Cyber diagnostic
ISO 27001: a certification that serves your business, not a binder of procedures
Your clients ask for it, and so do your insurers. Together, we build an information security management system that fits your SME and guide you through the certification audit.
30 minutes, no commitment.
Not had the diagnostic yet? It is the recommended starting point.
The situation
Many ISO 27001 projects stall for a simple reason: they start by writing policies instead of understanding risks. Months of work, an exhausted IT team and a system nobody uses. We do the opposite. We start with your activities, your actual risks and what your clients expect. The documents come afterwards.
What we do
Defining the scope
Define what needs to be certified and what can wait.
Gap analysis
Measure the distance between your current situation and the requirements of the standard.
Risk assessment
Identify what really threatens your activities and choose suitable measures.
ISMS documentation
Policies, procedures and a statement of applicability, written to be used.
Internal audit and management review
Check that everything holds up before the external auditor arrives.
Certification support
Team preparation, support during the audit and resolution of nonconformities.
How it works
1
Scoping
We agree the scope, schedule and roles with management.
2
Implementation
Risk assessment, measures and documentation. Your teams are involved without being overwhelmed.
3
Verification
Internal audit, management review and corrective actions.
4
Certification
We prepare you for the audit and stay by your side through to certification.
What you get
- A clear, defensible scope
- An up-to-date risk assessment
- Complete documentation that is actually used
- A prioritised action plan
- A team ready for the audit
Already ISO 9001 certified? Much of the framework is already there: management review, document control and corrective actions. We build on it rather than starting again.
ISO 27001 and NIS 2. In Belgium, ISO/IEC 27001 certification is one of the recognised routes to demonstrate compliance with NIS 2. NIS 2 and CyFun
Why DigiSôter
- Experience from large industrial groups, adapted to an SME.
- A team led by Philippe Cornette, Belgian CISO of the Year 2025.
- More than 10 consultants, available according to your needs.
- ESET partner for endpoint and server protection.
Let’s discuss your situation
In 30 minutes, we look together at what matters for your business and where to start.
30 minutes, no commitment.