Otago · South Island · New Zealand
ISO/IEC 27001 Services in Otago
Practical ISO/IEC 27001 implementation - gap analysis, policies, controls and audit readiness without the consulting overhead. Delivered for Dunedin, Queenstown, Wānaka, Oamaru and organisations across Otago, remotely first with on-site sessions by arrangement.
- Serving Otago nationwide
- Gap analysis to audit readiness
- Certified information security team
Otago organisations
Why Otago buyers ask for ISO/IEC 27001.
Otago blends Dunedin's education, health and technology base with Queenstown and Wānaka's tourism, construction and hospitality economy, plus viticulture and engineering elsewhere. Seasonal peaks and staff turnover make consistency a real challenge.
Tourism operators, technology firms and health providers face assurance requests from partners, insurers and public bodies, often on different timelines. Certification gives a stable framework that survives seasonal churn.
What the project covers
An ISMS built for Otago operations - not a template dump.
The scope is agreed with you: which systems, sites and people are covered, and which are deliberately left out. Everything below is then tailored to how your organisation actually works.
What the work includes
- Gap analysis against ISO/IEC 27001
- ISMS design, scoping and documentation
- Policy and procedure development
- Risk assessment and treatment planning
- Control implementation support (technical and organisational)
- Evidence collection and documentation
- Internal audit preparation and pre-assessment
- Certification audit readiness and support
- Ongoing maintenance and surveillance audit support
How an engagement runs
- 1
Gap analysis
We assess where you are against the standard and produce a prioritised implementation plan.
- 2
Build the ISMS
Policies, risk assessment and controls are developed to fit your business - not a template dump.
- 3
Implement
Technical and organisational controls go in, with staff awareness built along the way.
- 4
Prepare for audit
We pre-assess, fix gaps and get you ready for the certification body - then support you through certification.
Questions
Otago ISO/IEC 27001 questions, answered.
If your question is not here, ask it directly. We will tell you honestly whether certification is the right next step for the contracts you are chasing.
0800 00 2270
Joiner, mover and leaver controls are documented once, then applied each season. The evidence is the record that access was granted and removed as expected, not the size of the team.
Yes. The standard asks for defined responsibilities and evidence, not a large security department. We help decide who owns what and build routines the existing team can sustain.
Certification is issued by an accredited certification body - we cannot issue it. We prepare you thoroughly so the audit is a formality, not a gamble.
A small organisation with good foundations can certify in one to three months. It depends on scope and starting point - we will scope it honestly.
If clients or tenders demand certification, ISO/IEC 27001 gives you a structured route that also improves security. If not, a pragmatic security improvement program may be the better first step.
Costs vary widely with scope and size. We quote based on your situation after a gap analysis - and we will tell you if a lighter approach meets your needs.
Coverage
ISO/IEC 27001 across Otago and New Zealand.
We work with organisations throughout Otago, from Dunedin to smaller centres, delivered remotely with on-site visits by arrangement. Certification work is coordinated with your team, your IT provider and your chosen certification body.
Nearby regions
Not sure whether certification or a security review is the right first step? Start with a gap analysis - it tells you both.
Otago · South Island
Win the tender, then pass the audit.
Tell us which contract or customer is asking, and we will scope the shortest honest route to certifiable evidence.