Independent UK Certification Body

Information Security Management Certification

ISO 27001:2022 sets out the requirements for an Information Security Management System (ISMS), giving your organisation a structured, risk-based approach to protecting the confidentiality, integrity and availability of your information. International Assessment Bureau carries out independent, impartial audits against the standard and issues certification that gives your customers, partners and regulators confidence in how you handle data.

Get a Quote Talk to an Assessor

UK-based certification body

Applies to organisations of any size or sector

Clear, fixed-fee quotes

The Standard

What ISO 27001:2022 Certification Covers

Risk-Based Security

A systematic, risk-based approach to identifying, assessing and treating information security risks across your organisation.

Annex A Controls

A comprehensive set of security controls you select and apply based on your own risk assessment and business needs.

Confidentiality & Trust

Gives customers, suppliers and regulators independent assurance that sensitive information is properly protected.

Any Sector

Suited to any organisation that handles sensitive data - from finance and healthcare to IT outsourcing and data centres.

Why It Matters

What ISO 27001:2022 Does For Your Organisation

Protects what matters: keeps sensitive business and customer information safe, private and available when needed.

Wins more business: many tenders and enterprise customers require ISMS certification before they'll engage a supplier.

Supports compliance: helps evidence good practice alongside UK GDPR and other data-protection obligations.

Reduces risk: structured risk assessment catches security gaps before they become incidents.

Keeps you current: annual surveillance audits ensure the system - and your certificate - stays live and credible.

How It Works

Our Certification Process at a Glance

Application & Quote

Tell us about your organisation and scope. We provide a clear, fixed quote.

Payment & Invoice

Once you accept the quote, we issue an invoice and confirm your certification agreement before scheduling the audit.

Stage 1, Stage 2 & Surveillance Audits

On-site/remote assessment of your ISMS in operation against the standard, followed by ongoing surveillance audits.

Certification Decision

An independent technical review confirms the certification decision.

Certificate & Surveillance

Certificate issued, with annual surveillance audits to keep it valid.

See our full certification process for more detail on each stage.

Background

About ISO 27001:2022

International Assessment Bureau is an independent certification body based in the UK. ISO 27001:2022 takes a process-based approach to the implementation, operation, monitoring, maintenance and improvement of your ISMS, and it is internationally recognised as the leading standard for information security risk management.

ISO itself issues no certification or conformity test directly - it develops the standards through a consensus-based process involving technical committees, industry experts, consumer organisations and national standards bodies. Certification against ISO 27001:2022 is carried out by certification bodies such as International Assessment Bureau. If you are planning to get your organisation certified, get in touch with our team and we will walk you through exactly what is required for your sector and scope.

Ready to Start Your ISO 27001:2022 Certification?

Tell us about your organisation and we'll come back with a clear, no-obligation quote.

Get a Quote Ask a Question