ISO 27001 consultant in Durham
We are based at Belmont Business Park in Durham. Work with a practitioner who can sit in your office for the workshops that matter and run everything else remotely — finishing with a live management system in your own workspace, not a folder of documents.
What we do for Durham organisations
On-site or remote gap analysis
Risk assessment run with your team
Policies and Statement of Applicability
Internal audit and management review
Stage 1 and stage 2 attendance
The platform after handover
Local scope and coverage
Our office is at Portland House, Belmont Business Park, Belmont, Durham DH1 1TW. Most County Durham sites are within 30 minutes, so on-site workshops, evidence walkthroughs and audit days do not carry travel charges.
- Durham city and Belmont
- Chester-le-Street and Consett
- Bishop Auckland and Newton Aycliffe
- Darlington and Teesside
- Newcastle, Gateshead and Sunderland
- Remote across the rest of the UK
Prefer to talk first? Call +44 7876 191172 or use the contact page.
Regional work we have delivered
Client names are withheld under NDA; these are anonymised summaries of engagements in the North East.
Certified to ISO 27001:2022 in five months from a standing start, with the risk register, Statement of Applicability and evidence maintained in one workspace afterwards.
Lapsed management system recovered ahead of a surveillance visit; 14 nonconformities closed and internal audit brought back onto a rolling programme.
ISO 27001 and Cyber Essentials Plus aligned to a single control set so tender questionnaires could be answered from one evidence base.
Other standards supported locally
- ISO 9001 — quality management
- ISO 42001 — AI management systems
- ISO 20000-1 — IT service management
- Risk management — ISO 31000-aligned programmes
Working outside the North East? Remote ISO consultancy covers the rest of the UK on the same methodology.
Free ISO 27001 readiness assessment for Durham organisations
Answers buyers, procurement and auditors want
Do you actually visit sites in Durham?+
Yes. The office is at Portland House, Belmont Business Park, so kick-off, risk workshops, internal audit fieldwork and stage 2 attendance can all be delivered in person across County Durham without travel charges. Routine implementation sessions are usually run over video because they are quicker for both sides.
How much does ISO 27001 certification cost in Durham?+
Certification body fees for a UK organisation under 50 people typically fall between £4,000 and £9,000 over the three-year cycle, with consultancy quoted separately per phase. Our cost guide breaks the line items down; nothing about the pricing changes because you are in the North East.
How long will certification take?+
Three to four months from kick-off to stage 1 is realistic for a team under 50 with reasonable existing practice, and around six months where policies, risk management and evidence all need building. Your availability for evidence collection is the main variable.
Can you help with ISO 9001 or ISO 42001 at the same time?+
Yes. Context, leadership, internal audit and management review clauses are shared, so running an integrated management system is materially cheaper than sequential projects. We support ISO 9001, ISO 42001 and ISO 20000-1 alongside ISO 27001.
Can you also be our certification body?+
No — and no legitimate consultant can. Accreditation rules prevent a certification body from certifying a management system it helped build. We work alongside UKAS-accredited bodies and prepare you for their assessment.
Do we have to buy the software as well?+
No. The consultancy stands alone. Most clients keep the platform because it holds the risk register, controls, owners and evidence produced during the project, which makes surveillance audits far less work.