Our model
SaaS first. Expertise as an option.
Subscription
Nayru Platform
This is where the work happens. What a traditional project bills in consultant days is included in the subscription.
- Assessment and gap analysis
- Risks and Statement of Applicability
- Policies and procedures, first draft by AI
- Evidence linked and tracked
- Mock audit and project management
Optional, by the day
Nayru Experts
Qualified GRC consultants, only for the steps that require an independent human view. No package, no minimum number of days.
The math
What you used to pay in consulting days, Nayru does.
The steps of an ISO 27001 project don't change. What changes is who does them, and how much you pay for them.
StepTraditional approachWith Nayru
Assessment and gapsInterviews with a consultant, several billable days55 guided questions, included
Risk analysisWorkshops run by a consultantRisks suggested by AI, you decide
Statement of ApplicabilityWritten by hand, control by controlPrepared from your decisions
Policies and proceduresDays of writingFirst draft by AI, you review
EvidenceCollected through emails and spreadsheetsLinked to controls, tracked
Internal mock auditConsultant daysMock audit, as often as needed
How many consulting days do you save? Run the numbers with your day rate and assumptions.Open the calculator →
When an expert makes sense
Four cases, no more.
Every engagement is one-off, with no commitment to a number of days. You receive a proposal after a first conversation.
Independent internal auditISO 27001 requires an impartial internal audit, carried out by someone who did not build your system.
Complex risk analysisYour context is very specific, or you want a recognized method such as EBIOS Risk Manager.
Pre-audit reviewAn expert look at your documents and your file, just before the auditor.
Interview preparationYour teams practice the auditor's questions before audit day.
Less consulting. Ready sooner.
Tell us about your project: we show you what Nayru takes over, and what you would still hand to an expert.