Cybersecurity · ISO/IEC 27001

Cybersecurity and ISO/IEC 27001 with a realistic scope

We help strengthen controls and prepare an information security management system (ISMS) that fits your company's situation.

Assess my cybersecurity
Quick answer

What does preparing for ISO/IEC 27001 involve?

It involves defining the management system's scope, assessing risk, selecting and documenting controls, assigning owners and producing evidence that they work.

ISO/IEC 27001 readiness consulting is not the issuance of an organizational certification: certification is granted by an accredited certification body.

Rubén Castillo, who leads LandoHOUSE, earned the CertiProf ISO/IEC 27001 Internal Auditor certification (valid 2020–2023). See credentials

Path

Four stages to a working ISMS

01

Assessment

Gaps against applicable requirements and controls.

02

Design

Scope, risks, policies and statement of applicability.

03

Implementation

Controls, owners, evidence and awareness.

04

Readiness

Internal audit and management review.

Clear scope

What we do and what we don't

Included depending on scope

  • Assessment and roadmap
  • ISMS documentation
  • Support implementing controls
  • Preparation for the certification audit

Not included or contracted separately

  • Issuing the certification
  • 24/7 SOC monitoring
  • Penetration testing without a specific scope
  • Legal opinions
Related solutions

Keep exploring

Frequently asked questions

Straight answers

Does LandoHOUSE certify companies in ISO/IEC 27001?

No. We support readiness; certification is issued by an independent, accredited certification body.

Is ISO/IEC 27001 only for large companies?

No. The system is sized to the chosen scope and can start with the most critical processes or services.

How does it relate to CISO as a Service?

CISO as a Service can lead the security program and report ISMS implementation progress to leadership.

Contact

Let's strengthen your information security

Which process, risk or opportunity does your company need to address? Let's talk to understand your situation and define the next step.

CoverageBased in Guatemala · regional service according to the agreed scope

Let's talk about your next project

Tell us what you need to improve, build or protect. We will review your request and coordinate the next step.