Competent auditors
Auditors selected for the competence appropriate to your industry and certification scope.
Blue Wolf Certifications / ISO/IEC 27001
ISO/IEC 27001
Certification
Protect Information.
Build Trust.
Demonstrate Security.
Professional, independent ISO/IEC 27001 certification audits for organizations across the United States and Australia.
ARS & SCK certification body partners · accreditation subject to scope verification*
Information Security Management
Independent Certification Audits
Professional, Respectful Auditors
United States & Australia
Why Blue Wolf
Information security certification, without unnecessary complexity.
Your certification audit should be thorough, impartial and respectful of your time. Our approach combines competent auditors, responsive communication and transparent certification arrangements.
Local, responsive service
Clear communication and practical scheduling across the US and Australia.
Respectful audit experience
Professional, evidence-based auditing that treats your team with courtesy.
New certification
Independent Stage 1 and Stage 2 audits for organizations seeking their first certificate.
Certification transfers
Review options for transferring an existing accredited ISO/IEC 27001 certificate.
Ongoing certification
Surveillance and recertification audit coordination throughout your certification cycle.
The standard
What is ISO/IEC 27001 certification?
ISO/IEC 27001:2022 specifies requirements for an information security management system (ISMS). It provides a framework for identifying, evaluating and treating information security risks, protecting information and continually improving security management.
Certification independently assesses whether your ISMS meets the standard’s requirements. ISO/IEC 27001:2022 Annex A contains 93 reference controls grouped into organizational, people, physical and technological themes. Certification does not guarantee that security incidents cannot occur.
27001
Information security assurance your customers can recognize.
Relevant to technology providers, professional services, government suppliers, manufacturers and organizations entrusted with sensitive information.
ISO/IEC 27001:2022
What will the certification audit assess?
Your ISMS is assessed against the applicable requirements of ISO/IEC 27001, including how information security risks are managed and how the system is monitored and improved.
Risk assessment & treatment
How your organization identifies, evaluates and addresses information security risks.
Statement of Applicability
How Annex A controls are considered, justified and reflected in the organization's treatment approach.
Performance & improvement
Leadership, internal audits, management review, corrective action and continual improvement.
A clear route to certification
The ISO/IEC 27001 Certification Process
A clear route from initial application through independent certification and ongoing surveillan
1
Request a Quote
Share your activities, personnel, sites and proposed scope.
2
Application & Planning
Confirm the certification arrangements and audit program.
3
Stage 1 & 2 Audits
Assess ISMS readiness, risk management, implementation and effectiveness.
4
Certification Decision
ARS or SCK independently reviews and decides certification.
5
Ongoing Audits
Surveillance and recertification throughout the cycle.
Already certified?
Looking to transfer your ISO/IEC 27001 certification?
Changing certification bodies does not always mean starting again. If you hold a valid accredited ISO/IEC 27001 certificate, we can review whether it is eligible for transfer under the applicable requirements.
A straightforward review
We’ll discuss your existing certificate, audit history, open nonconformities and certification status before determining the available options. Transfers are subject to the issuing certification body’s approval.
Transparent certification arrangements
Blue Wolf, ARS, SCK and UAF
Blue Wolf is a contracted US and Australian representative for ARS and SCK. The responsible certification body retains authority for certification decisions and certificate issuance.
ARS
Certification body partner. Accreditation status and the applicable ISO/IEC 27001 scope should be confirmed against the current UAF directory.
SCK
Certification body partner. Accreditation status and the applicable ISO/IEC 27001 scope should be confirmed against the current UAF directory.
*Accreditation claims and any accreditation marks must be checked for the specific issuing body, standard, scope and geography before publication. Blue Wolf is not presented as independently accredited.
Common questions
ISO/IEC 27001 Certification FAQs
How much does ISO 27001 certification cost?
Costs depend on personnel, scope, sites, information security complexity and required audit time. Request a tailored quotation.
How long does ISO 27001 certification take?
Timing depends on ISMS readiness, auditor availability and closure of any nonconformities. We can discuss a realistic audit schedule.
What version of ISO 27001 applies?
The page addresses ISO/IEC 27001:2022. Confirm any transition or certification requirements applicable at the time of your audit.
Does certification mean we cannot suffer a cyberattack?
No. Certification assesses your information security management system against the standard; it does not guarantee prevention of cyber incidents.
Can an ISO 27001 audit be performed remotely?
Remote auditing may be possible where appropriate and permitted under applicable certification requirements and risk considerations.
Can we transfer an existing ISO 27001 certificate?
A transfer may be possible for eligible valid accredited certificates, subject to review of certification status, audit history and the issuing body’s requirements.
Who issues the ISO 27001 certificate?
ARS or SCK, as the responsible issuing certification body under the applicable arrangements, makes the certification decision and issues the certificate.
Does Blue Wolf provide ISO 27001 implementation consulting?
Blue Wolf’s role under these arrangements is independent certification auditing, not implementation consultancy for the same certification activities.
Competent. Consistent. Respectful.
Ready for ISO/IEC 27001 certification?
Whether you're pursuing your first certificate, transferring an existing one or planning recertification, we're ready to discuss your requirements.
Get Your ISO/IEC 27001 Quote →