Achieve ISO 27001 Certification in 90 Days
Your roadmap from gap analysis to signed certification. ISMS scoping, Annex A control mapping, supplier-relationship controls, and a defensible audit trail — starting at $3,200 (STACK Compass).
The full 90-day ISO 27001 program
Baseline assessment, Annex A control mapping, ISMS roadmap, and optional vCISO acceleration — everything you need from blank slate to signed certificate.
STACK Compass Assessment
Baseline audit of your current state: control coverage, gaps, estimated implementation effort for ISO 27001.
$3,200
Control Mapping
Map ISO 27001 Annex A controls to your systems and processes. Identify quick wins vs. engineering work.
Included
Implementation Roadmap
Week-by-week plan: policy creation, system hardening, evidence collection, remediation.
Included
Hands-On Support (Optional)
Named vCISO + project management + weekly check-ins. ISO-specific guidance included.
+$9,000–$14,000
Gap analysis. Roadmap. Implementation. Certification-ready.
Four phases from blank ISMS to a signed ISO 27001 certificate. Each phase has a defined goal, deliverables, and exit criteria.
1 · Gap Analysis (Weeks 1–2)
Goal: Understand your infosec posture.
- Run STACK Compass for ISO 27001 controls
- Identify gaps: missing policies, systems, evidence
- Review information security context
- Estimate implementation effort per control
- Prioritize foundational controls
Deliverable: ISO 27001 gap report (25–35 pages)
2 · Roadmap (Week 3)
Goal: Define your path forward.
- Map ISO 27001 controls to your infrastructure
- Create information security policies and procedures
- Define risk management and assessment strategy
- Plan supplier relationship controls
- Align timeline with certification audit schedule
Deliverable: Roadmap + control mapping matrix
3 · Implementation (Weeks 4–8)
Goal: Build your ISO 27001 program.
- Deploy information security controls (policies, systems, processes)
- Document control evidence
- Conduct internal audits
- Implement supplier management controls
- Remediate findings
Deliverable: Control evidence + audit documentation
4 · Certification Ready (Weeks 9–12)
Goal: Pass your certification audit.
- Final internal audit (find last-minute gaps)
- Prepare for certification body audit
- Coordinate on scope and timeline
- Receive ISO 27001 certification
Deliverable: ISO 27001 certification letter
Faster, cheaper, and built to scale
Three reasons engineering teams switch from platform-only to STACKVault's assess-accelerate-sustain approach.
5 Months Faster
90 days to certification-ready vs. Vanta's 6+ months. Meet your timeline.
1/10th the Cost
$3.2k (STACK Compass) + $9–14k (hands-on) = ~$12k–$17k total. Vanta: $30k+/year.
Scalable Approach
Start with self-service. Add hands-on support when needed. Sustain with retainer as you grow.
Pick the tier that matches your team
From DIY assessment to fully-managed acceleration to ongoing CISO retainer.
Self-Service (DIY)
Price: $3,200 (STACK Compass)
Best if you have ISO 27001 expertise in-house.
Timeline: 120–180 days
Hands-On Acceleration · Recommended
Price: $12,200–$17,200 total (Compass + Acceleration)
Named vCISO, weekly check-ins, implementation guidance, certification coordination.
Timeline: 90 days to certification-ready
Add Ongoing Support
Price: +$5,000–$10,000/month (CISO Office Hours)
After certification, sustain your program with governance and policy reviews.