Free download · Sample ISO 27001 proposal
Sample ISO 27001:2022 certification engagement proposal
See what a CyberSigma ISO 27001 engagement looks like before you ask for a quote — a complete sample proposal (prepared for a fictional client) covering ISMS scoping, the 2022 Annex A uplift, internal audit, certification-audit coordination and the timeline your team would actually run. Judge the engagement, not a sales pitch.
Standard
ISO/IEC 27001:2022
Model
Gap → certificate
Annex A
93 controls
Format
PDF
Get the sample iso 27001 proposal
Enter your work email and we’ll send it straight to your inbox.
What’s included
ISMS scoping & SoA logic
How the ISMS boundary and Statement of Applicability get decided — and defended at audit.
Delivery phases
Risk assessment, control implementation across the four 2022 themes, internal audit and management review, then stage 1/stage 2 coordination.
What your team provides
The honest effort picture — who we need, when, and for what.
After the certificate
Surveillance-audit readiness and the continuous operating model.
Who it’s for
- Buyers comparing ISO 27001 consultants on engagement structure
- Security leads budgeting an ISMS programme internally
- Teams re-certifying under the 2022 revision
Inside the sample iso 27001 proposal
- Executive summary and outcomes
- ISMS scoping approach
- Phase-wise plan with team effort
- Internal-audit and certification coordination
- Post-certificate operating model
Written by Tanya Kumari · Compliance assessment, validation & certification-readiness
Reviewed by Abhay Singh · Updated July 2026
Want this proposal scoped to your ISMS?
A scoping conversation turns this sample into your actual proposal — real boundary, real timeline, named milestones.