Free Guide · United Kingdom
What ISO 27001 Certification Really Costs in the UK
Search "ISO 27001 cost UK" and the answer varies by a factor of ten. This guide explains why, and gives you a way to judge any quote on its merits.
Consultancies do not disagree on price because they are being cagey. The organisations behind published figures are not comparable: a ten-person firm with cloud-only infrastructure and a two-hundred-person business running its own data centre are pursuing the same certificate through very different projects.
This guide sets out the four things that actually determine your number, real market benchmarks drawn from published UK certification body and consultancy data, and a way to judge any quote you receive on its merits rather than against a headline figure that may not describe your organisation at all.
What's inside
What the full guide covers
- The four cost drivers behind every ISO 27001 quote
- A cost table by company size, and by project phase
- How certification body audit fees work, and how they differ from consultancy fees
- A cost comparison against Cyber Essentials
- Five ways to reduce cost without cutting corners
- A checklist of questions to ask before you sign a quote
Free preview
Why a single number is the wrong question
A ten-person firm with cloud-only infrastructure and a two-hundred-person business running its own data centre can both be pursuing ISO 27001, through very different projects. What sets your price is not the certificate itself. It's four things: how much of your infrastructure and data falls inside the certification scope, how much of the required documentation and controls already exist versus need to be built from scratch, which certification body you use and how their audit day rates compare, and how much remediation work the gap assessment turns up before you're ready for a Stage 1 audit.
Most published "ISO 27001 cost" figures answer none of these questions, which is why they vary so widely. The full guide breaks down each driver, gives benchmark figures by company size, and includes a checklist for reading any quote you're given.
Get the complete guide
Enter your details below and we'll email you the full PDF, including the market benchmark tables, the Cyber Essentials comparison, and the quote checklist.