Certify Your Security with ISO 27001 & 27701
The ISO 27001 standard sets the guidelines for implementing an Information Security Management System (ISMS). Through this framework, you guarantee the security, integrity and confidentiality of your data, mitigating risks and meeting your regulatory obligations.
Make a Safe Investment in Your Digital Future
Choose a cybersecurity-expert company to implement the ISO 27001 and 27701 standards and guarantee comprehensive protection of your data. With our experience we transform your security practices, improving your organization’s resilience against threats and ensuring regulatory compliance.
27001 y 27701, Better Together
ISO 27701 is an extension of ISO 27001: one protects information, the other privacy. To implement 27701, your organization first needs an ISMS compliant with 27001. We support you with both.
ISO 27001, ISMS
Information Security Management System: the international standard for protecting your data.
ISO 27701, PIMS
A privacy extension that adds personal-data management requirements and supports GDPR.
Risk Analysis
Identification and treatment of information risks, the foundation of the whole ISMS.
Statement of Applicability
We define and justify the Annex A controls applicable to your organization.
Internal Audit
We verify the system’s effectiveness and prepare your team for certification.
Certification Support
We guide you throughout the certification body’s audit until you earn the seal.
From Diagnosis to Certificate
We take you through a clear certification funnel: we start from a GAP diagnosis and advance, phase by phase, to the ISO 27001 and ISO 27701 seal. At each stage you reduce risks and gain maturity and confidence.
The seal that opens doors: increasingly common as a requirement in tenders and with large clients.
Four Steps to the ISO Seal
GAP Analysis
We measure the gap between your current situation and the standard’s requirements.
Implementation
We define the scope, policies, risk analysis and controls.
Internal Audit
We check that the system works and correct any nonconformities.
Certification
We support you in the external audit and the maintenance cycles.
Security Is Not a Milestone, It’s a Cycle
ISO 27001 is based on the PDCA cycle: plan, implement, check and improve, continuously. Certifying once is not enough; we keep your ISMS alive so it evolves with threats and with your business.
We Answer Your Questions
Do I need ISO 27001 before 27701?+
Yes. 27701 is a privacy extension that relies on an ISMS compliant with 27001. We implement both in a coordinated way.
Do you support us during the certification audit?+
Yes, throughout the certification body’s audit and in the subsequent maintenance cycles.
Who maintains the system afterwards?+
We can keep your ISMS alive with support, internal audits and continuous improvement.
How long does ISO 27001 certification take?+
It depends on the size and maturity of your organization, usually between 4 and 9 months from the diagnosis to the certification audit.
What is the difference between ISO 27001 and ISO 27701?+
ISO 27001 certifies your information security management system; ISO 27701 extends it to privacy management and reinforces your compliance with RGPD.
GRUPO LINKA supports ISO 27001 (information security) and ISO 27701 (privacy) certification: consulting, implementation and audit. We are a Fortinet Expert Partner with our own 24/7 SOC (Spartan SOC), certified in ISO 27001 and with ENS High Level accreditation, and we provide service across Spain. It is part of our Cyber Consulting.