Build business confidence
Demonstrate to customers and partners that information security is a priority for your organisation.
zemITis / advisoryConnected expertise.
A framework for trust.
ISO/IEC 27001 · ISMS · Certification
International trust and a competitive edge
Achieve ISO 27001 certification.
Comprehensive preparation and expert support, from ISMS design to a successful audit. Open the door to enterprise opportunities in Hungary and international markets.
Build trust. Open new markets. We guide you through ISO 27001, from your first assessment to certification.
Trust.Opportunity.Recognition.
ISO 27001 Lead Auditor 100% audit success From gap analysis to certification Internationally recognised
explore our approach Instant estimate ISO 27001 readiness
How much does ISO 27001 preparation cost?
Adjust the sliders and answer the questions to see your estimated one-off preparation fee. This also includes support during the Stage 1 and Stage 2 certification audits.
Number of employees 49 employees
Information security maturity 3 – Developing
Core policies are maintained, a risk assessment has been completed and a system inventory exists. Regular reviews, audits and training are still missing.
Planned certification scope
Number of sites
Do you have a certified management system, such as ISO 9001?
Are you subject to NIS2 and/or DORA?
Would you like ongoing security officer support after certification?
Estimated one-off preparation fee
2.8 – 3.4m HUF
Indicative fee · excluding VAT Free consultation Response within 24 hours GDPR compliant
This estimate is indicative. We confirm the fee after a free initial consultation. Certification body fees are charged separately.
The first step Let’s start with
Let’s start with
a clear picture.
Understand the likely costs. Answer a few questions for an instant estimate, then we will work through the details together.
Experience that makes a difference
10+
years of professional experience
Big4
consulting background
40+
successful ISO 27001 projects
4×
Lead Auditor qualification
Business value Why pursue ISO 27001
Why pursue ISO 27001
certification?
ISO 27001 is increasingly a prerequisite for major business partnerships.
A competitive advantage
ISO 27001 certification is a common requirement in tenders, supplier qualification and enterprise partnerships.
Reduce risk
Structured information security risk management helps reduce the likelihood of incidents and data loss.
An internationally recognised standard
ISO 27001 is a globally accepted information security framework.
Who it is for
Who benefits from ISO 27001?
ISO 27001 can benefit any organisation that:
Processes sensitive data
Works with business-critical information
Supplies large enterprises
Operates in international markets
Participates in tenders or procurement processes
Wants to reduce information security risk
Start preparing for ISO 27001 today Book a free consultation to understand the steps towards successful certification.
Book a free consultation Our process Your route to
Your route to
successful certification
Five clear steps from initial assessment to a successful certification audit, supported throughout by qualified Lead Auditors.
1
Step 01
Gap analysis
We review your processes, IT infrastructure and policies in detail, identifying gaps against ISO 27001 requirements, including Annex A controls.
2
Step 02
Risk assessment and ISMS design
We identify your organisation’s specific information security risks, design the ISMS approach and define the controls you need.
3
Step 03
Policy development and implementation
We develop tailored policies, process descriptions and incident response procedures, then support implementation and staff training.
4
Step 04
Risk treatment and internal audit
We support risk identification, assessment and treatment. An independent internal audit tests how the ISMS works in practice, giving you time to make improvements before the external certification audit.
5
Step 05
Certification audit support
Our experts support the entire audit process and help maintain compliance as your organisation and its requirements change.
Successful ISO 27001 certification & ongoing maintenance
Why zemITis Why choose zemITis?
Why choose zemITis?
Big Four experience. Rigorous delivery.
A practical approach
We build a working management system that supports your day-to-day business, with documentation you can use in practice.
Qualified Lead Auditors
Our advisers hold recognised ISO 27001, CISA and CISM qualifications and understand certification bodies’ expectations and assessment methods.
100% audit success
Every company we have prepared has successfully completed its formal certification audit.
FAQ
Frequently asked questions
What you need to know about ISO 27001 certification, the process and the costs.
ISO/IEC 27001 is an internationally recognised standard for establishing, operating and continually improving a risk-based Information Security Management System (ISMS). It helps demonstrate to customers, partners and regulators that information security risks are managed systematically. Our experts guide you from initial assessment to a successful certification audit.
Typically 3–9 months, depending on your organisation’s size, maturity and existing security practices. An established IT and governance environment can shorten the process.
Certification is generally voluntary, but many sectors and international partnerships require it, particularly when working with large enterprises and overseas customers.
Costs depend on size, complexity and existing security maturity, and include advisory fees, internal effort and the certification audit. A precise estimate requires an initial assessment; preparation fees are generally HUF 3–10 million, excluding VAT. Our calculator provides an immediate estimate.
Typical documents include an information security policy, risk assessment methodology and reports, the Statement of Applicability (SoA), procedures for areas such as incident and access management, supporting records and audit evidence.
A separate dedicated role is not mandatory under the standard, but clearly assigned responsibility is needed to coordinate the ISMS and compliance activities.
Stronger customer and partner confidence, an advantage in tenders, structured risk management, fewer security incidents and international recognition.
As advisers, we help you build the system and complete the required internal audit. The formal certification audit is carried out by an independent accredited certification body. We help you select one and support you throughout the audit.
Yes. We support the full certification audit, including discussions with auditors and the resolution of identified gaps.
This depends on your maturity. Initial implementation usually requires the most effort; ongoing maintenance then becomes part of normal operations.
ISO 27001 is a voluntary international standard, while NIS2 establishes legal compliance requirements in the EU. ISO 27001 provides a strong foundation for NIS2 but does not automatically cover every legal obligation.
Usually not on their own. ISO 27001 requires a documented management system, risk management and continual improvement as well as technical controls.
An ISO 27001 certificate is typically valid for three years, subject to annual surveillance audits.
You must maintain and continually improve the ISMS. Annual audits assess whether compliance is being sustained.
ISO 27001 provides a technical and organisational framework that supports data protection and GDPR compliance, but does not replace it.
As early as possible. Preparation takes time, especially without an existing structured ISMS. Starting early helps reduce audit risks and costs.
Get started
Open the door to international business.
A free consultation and tailored preparation plan. Understand your starting point and the route to successful ISO 27001 certification.