Assessments
Know where you stand before you commit
Standards-based evaluations that show your current state before you commit to certification. We assess against ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, ISO 50001 and IEC 62443, covering information security, AI governance, privacy, energy and OT security in one engagement or separately. Each assessment delivers a clause-by-clause gap analysis, a prioritised action plan and a realistic roadmap to certification, so findings come early instead of at audit.
Three kinds of assessment
-
ISO assessments
Evaluations against ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701 and ISO 50001. We assess your current state clause by clause, compare it with what the standard requires, and deliver a prioritised gap report with a realistic roadmap to certification. Take one standard or all four.
See the ISO standards → -
IEC 62443 assessments
OT security evaluations for SCADA, PLC, DCS and IIoT environments. We map your zones and conduits, compare achieved with target security levels, and assess your security programme against the relevant parts of IEC 62443, so you know where your industrial systems stand before an auditor looks.
See OT security → -
Integrated multi-standard assessment
One engagement across ISO/IEC 27001, 27701, 42001 and ISO 50001, and, where relevant, IEC 62443. The four ISO standards share one high-level structure, so one assessment avoids repeated effort. IEC 62443 has a different structure, so we map it to your information security system by risk, assets and incidents. The result shows where your programmes reinforce each other and where they overlap.
Ask about an integrated assessment →
Initial assessment
Request an initial assessment with one of our consultants. We review your current state against the relevant standard, identify your biggest gaps and outline what certification would involve. Scope and eligibility are confirmed when you get in touch.
Request an initial assessmentFree self-assessment tools
Online self-assessments are coming soon, so you can get an indicative readiness view in minutes.
- ISO/IEC 27001 Information security readiness Coming soon
- ISO 50001 Energy management readiness Coming soon
- IEC 62443 Industrial security programme readiness Coming soon
These will be self-assessment aids only. They do not measure compliance and are not a certification audit.
Not sure where to start?
A scoping call is a conversation about your organisation, the standards in play, and what a sensible first step looks like.