Locking Trust Logo
ISO/IEC 27001:2022 Ready

The International
Gold Standard.

Build a resilient Information Security Management System (ISMS). We guide you from Gap Analysis to Certification with the latest 2022 standards.

More Than Just a Certificate

ISO 27001 is not a one-time checklist; it is a framework for an Information Security Management System (ISMS). It demonstrates to clients and stakeholders that you manage data with the highest level of global security standards.

The PDCA Approach

We implement the Plan-Do-Check-Act cycle, ensuring your security posture improves continuously year over year, keeping you compliant with the surveillance audits.

PLAN

Define scope & analyze risks

DO

Implement Annex A controls

CHECK

Internal audits & reviews

ACT

Corrective actions & improvements

Why Pursue ISO 27001?

Beyond security, certification acts as a strategic enabler that unlocks new markets and establishes unshakeable trust.

Competitive Edge

Qualify for government tenders and enterprise contracts that mandate ISO 27001.

Legal Compliance

Meet requirements for GDPR, DPDP, and other privacy laws via the ISO framework.

Global Trust

Recognized in 160+ countries as the benchmark for data security.

ANNEX A STRUCTURE (2022 UPDATE)

Comprehensive Risk Management

We help you implement the 93 controls categorized into 4 key themes, ensuring 360-degree protection.

37 Controls

Organizational Controls

Policies for cloud security, threat intel, and information classification.

8 Controls

People Controls

Screening, terms of employment, and remote working security.

14 Controls

Physical Controls

Securing offices, clear desk policy, and equipment maintenance.

34 Controls

Technological Controls

Authentication, encryption, secure coding, and network security.

TIMELINE

The Road to Certification

A structured 6-9 month journey to global recognition.

01Gap Analysis

We audit your current state against ISO standards to identify missing controls.

02ISMS Documentation

Writing the mandatory policies (SoA, Risk Treatment Plan, IS Policy).

03Implementation

Rolling out controls: Endpoint protection, HR checks, Access reviews.

04Internal Audit

Locking Trust performs a pre-assessment to verify readiness.

05Stage 1 Audit

External Auditor reviews documentation and scope.

06Stage 2 Audit

External Auditor verifies evidence of controls in action.

07Certification

Certificate awarded (valid for 3 years with annual surveillance).

Start Your ISO Journey

From establishing the scope to facing the auditor, Locking Trust is your partner in achieving the ISO 27001:2022 standard.