Cybersecurity: certification readiness
We help you prepare your Information Security Management System for ISO 27001 or Spain’s National Security Framework (ENS) certification. We’ve been through it ourselves.
Kit Consulting cybersecurity certification readiness
More and more customers and public bodies require their suppliers to hold a security certification. The Kit Consulting cybersecurity advisory service (certification readiness) prepares your SME to put its ISMS forward for ISO 27001 or ENS certification (medium or high category, following the CCN-STIC 825 guide) for the core service you provide to customers or public administrations.
The certification audit itself is carried out by an accredited body and isn’t included in the service. Our job is to make sure you arrive fully prepared.
What certification readiness includes
Content from the official Kit Consulting catalogue.
- Vulnerability analysis and penetration testing.
- Review of your cybersecurity policies, plans and procedures.
- Proactive protection against attacks targeting your data.
- Cybersecurity awareness for your employees.
- Preparing your ISMS documentation so you can apply for ISO 27001 or ENS certification.
- Developing and delivering a use case.
The road to certification
We guide you methodically, just as we did with our own certification.
- 01
Scope
We define which service and systems fall within the ISMS and which framework applies: ISO 27001, ENS or both.
- 02
Gap analysis
We compare your current position with the standard’s requirements and identify what’s missing.
- 03
Technical testing
We carry out vulnerability analysis and penetration testing to understand the real risk.
- 04
Documentation
We review and prepare policies, the risk assessment, the statement of applicability and procedures.
- 05
Audit preparation
We train the team and check that everything is ready for the certification body.
Advice from an ENS-certified company
OnClick is certified under Spain’s National Security Framework (ENS). We’ve prepared our own documentation, been through audits and maintain the system day to day. We know what auditors ask for and where companies tend to get stuck.
If you want to strengthen your technical foundations before certifying, see advanced cybersecurity advisory and our cybersecurity solution.
- First-hand ENS certification experience
- ISO 27001 and ENS in one approach
- Tailored documentation, not generic templates
- Opens the door to public sector contracts
Programme conditions
Kit Consulting requirements, amounts and deadlines depend on the current call. Get in touch and we’ll explain them.
Frequently asked questions
Is the certification itself included?
ISO 27001 or ENS?
What is the CCN-STIC 825 guide?
What do the ENS medium and high categories mean?
Is my company ready to get certified?
Let's talk about your project
Tell us what you need and we'll get back to you within 24 business hours, no strings attached.