// security-readiness-review
Security Readiness Review
About 5 days of gap analysis against ISO 27001, TISAX or your customers' questionnaires, with a prioritised roadmap. Readiness, not certification.
What you get
- Scope call: which standard or questionnaire matters to you
- Gap analysis against ISO 27001, TISAX or customer security questionnaires
- Interviews with the people who run your systems
- Review of your existing policies and evidence
- Prioritised roadmap: what to fix first, and why
- Readout session with your management
How it runs
Scope: the standard or questionnaire, the systems and the people involved.
Interviews and a review of your policies and evidence.
Gap analysis: where you stand against each requirement.
Prioritised roadmap and a readout session with your management.
Good fit / not a fit
A good fit if
- A customer or partner asks for ISO 27001 or TISAX, and you do not know how far away you are.
- You get long security questionnaires and struggle to answer them.
- You want a plan before you spend money on a certification project.
Not a fit if
- You need a certificate now. This review prepares you; only an accredited certification body can certify.
- You want all your policies written for you in five days.
- You are not ready to share how your systems really work.
Pricing
FROM €5,900
Readiness, not certification. Larger scopes or several sites are quoted individually. All services are for business customers only. Prices net, plus VAT. Fixed quote after the intro call.
Questions
Do we get a certificate afterwards?
No. This is readiness, not certification. You learn where you stand and what to do next. Certification is done by an accredited certification body.
Which standards do you cover?
ISO 27001, TISAX and customer security questionnaires. Where your customers expect it, we also map the findings to BSI IT-Grundschutz or BSI C5.
Who runs the review?
Chan Vu Luu: seven years of internal ISMS and supplier audits for large enterprises, as a consultant and as Deputy Information Security Officer.
What do we get at the end?
A prioritised roadmap and a readout session. Every gap comes with the business risk in plain words and a clear next step.
Often paired with
Security Partner for your project
A senior security lead next to your team or agency: architecture review, access rights, data flows and release checks.
Supplier Security Check
Before you sign with a supplier, we check whether they can be trusted with your data. You get the answer on one page.
Have something to ship?
FREE INTRO CALL · FIXED QUOTE WITHIN 2 WORKING DAYS OF THE CALL
Start a project