FR Book a demo

ISO 27001. Audit-ready in 30 days.

Scope, risk analysis, Statement of Applicability, policies, evidence: Nayru structures your ISMS and prepares the auditor's file. Without paying for weeks of consulting.

Book an ISO 27001 demoCalculate your savings

Why now

ISO 27001 has become a condition for selling.

Large customers

They ask for it before signing.

Tenders, supplier onboarding, renewals: certification is more and more often a prerequisite.

Questionnaires

Fewer security questionnaires.

A certificate answers upfront a large share of the security questions your prospects ask.

International

Trust that travels.

As an international standard, ISO 27001 is recognized by your customers in France and abroad.

The journey

A first certification, in four weeks of preparation.

  1. Week 1Assessment

    Questionnaire, ISMS scope, gaps.

  2. Week 2Risks and SoA

    Risk analysis, Statement of Applicability.

  3. Week 3Documents

    Security policy and policies: first drafts, review, sign-off.

  4. Week 4Evidence

    Linked to controls, validated by your teams.

  5. Day 30Audit-ready

    Mock audit passed, complete file.

30 days of audit preparation, depending on your scope and starting maturity. Certification is still issued by an accredited, independent body.

What takes time

The steps are known. It's chaining them together that costs.

Every deliverable takes up your teams' time. Here is what Nayru handles at each step.

Define the ISMS scopeGuided questions about your activities, sites and assets.
Run the risk analysisRisks suggested by AI, treatment decisions tracked.
Draw up the Statement of ApplicabilityThe Annex A controls, with the justification for inclusion or exclusion.
Produce policies and proceduresFirst versions prepared by AI, to review and approve.
Gather the evidenceEvery control shows the expected evidence and its status.
Prepare the internal audit and management reviewMock audit, organized file, and an independent expert if needed.

Who does what

What Nayru prepares. What stays with your teams.

Nayru prepares

  • The assessment and gap analysis
  • A prioritized action plan
  • The risks and the Statement of Applicability
  • The first versions of your documents
  • Evidence management and the mock audit

Your teams

  • Validate the scope and the accepted risks
  • Implement the technical measures
  • Approve the policies at management level
  • Validate every piece of evidence
  • Choose the certification body
ISO 27001 requires an impartial internal audit. If no one in-house can carry it out, an expert steps in by the day, only for that step.On-demand experts →

Nayru does not issue the certification. It is granted by an accredited, independent certification body, after its audit.

ISO 27001 FAQ

Your questions about ISO 27001.

What do the 30 days cover?

Preparation for the certification audit: scope, risk analysis, Statement of Applicability, documents, evidence and mock audit. The target assumes a compatible scope and starting maturity, which the assessment checks in the first week. It is not a guarantee of certification.

Does Nayru certify my company?

No. Certification is issued by an accredited, independent body. Nayru helps you prepare your ISMS and the file presented to the auditor.

Do we need a full-time CISO?

Not necessarily. You need an identified owner and management involvement. In many SaaS companies, this role is held by the CTO or a security lead, with expert support when needed.

What happens after certification?

The certificate is valid for three years, with annual surveillance audits. Nayru helps you keep your documents, evidence and action plan up to date between audits.

Let's talk about your ISO 27001 project.

A prospect is asking for certification, or you want to get ahead? Tell us about your situation and see how much time Nayru saves you.

Book an ISO 27001 demo