Which standard the gate in front of you actually requires, and which it does not.
THE FREE DIAGNOSTIC
Know where you stand.45 minutes with the practitioner.A written roadmap, same day.
Not a sales call and not a scoping call. Bring the questionnaire, the clause, the customer email or the auditor's finding, and leave knowing what it requires and what you already have.
- Free, no obligation, no follow-up sequence unless you ask
- One-page roadmap written the same day, yours either way
Currently accepting diagnostic bookings
CISSP, Project Management Professional (PMP)®, PECB Lead Auditor, ISO 27001 and ISO 42001
Book the free 45 minute diagnosticBring the questionnaire, the clause or the customer email. You leave with a one-page roadmap either way.Same-week availability
No sales pitch 45 minutes Senior practitioner
CISSP, Project Management Professional (PMP)®, ISO 27001 Lead Implementer and Lead Auditor, ISO 42001 Lead Implementer and Lead Auditor.
Trusted by
THE DIAGNOSTIC AT A GLANCE
45 min
with a senior practitioner
Video, at a time you choose.
1 page
written roadmap
Sent the same day. Yours either way.
£0
for the diagnostic
No obligation and no follow-up sequence.
4
standards
ISO 27001, ISO 42001, SOC 2 and Cyber Essentials.
Programme prices are published at /pricing, excluding VAT, and fixed after scoping. Goldline is not a certification body.
What we would cover
Where your boundary should sit: the people, systems and sites inside the certificate.
What you already have that counts, and the order to build the rest in.
Doing it alone vs with Goldline
Doing it alone
- One person reads the standard at night and guesses which controls apply.
- A template pack that an auditor takes apart at Stage 1.
- The boundary drawn too wide, so everything after it is bigger.
- Evidence gathered in the week before the visit.
- The audit date moving because the internal audit was left to the end.
With Goldline
- The person who scopes it is the person who delivers it.
- A boundary agreed in writing before anything is built.
- Your team builds it. Goldline directs the order and reviews every artefact.
- Evidence organised so an auditor or a procurement reviewer can find it without a rebuild.
- Fixed published prices, confirmed after scoping. An independent body certifies.
The diagnostic comes first. If it is all you need, that is a good outcome and nothing else happens.
How a programme runs
Planned timings for a single entity under 50 people. The independent body sets its own audit dates.
Built with your named owner, about four hours a week, with Goldline directing the order and reviewing every artefact.
Weeks 1 to 4
Scope and diagnostic
Free diagnostic, then scoping of your systems, your risks and what a buyer will ask to see. Fixed price confirmed.
Weeks 5 to 12
Build with direction
Your team builds the single management system. Goldline sets the order, reviews every artefact and runs the internal audit.
Months 4 to 9
Independent assessment
Goldline prepares you for the Stage 1 and Stage 2 assessments by an accredited certification body and stays through close-out of any findings.
AFTER THE CALL
After the call
The price is said on the call. The fee is fixed once the scope is agreed. Half at the start, half on delivery, or spread across the programme in instalments agreed on the diagnostic. In week 1 we request quotations and Stage 1 and Stage 2 dates from three UKAS-accredited certification bodies, so you know your audit dates early. The body sets its own dates. The internal audit is included and carried out by an independent internal auditor appointed by Goldline, never by the team that built your system.
Want to do more of the work yourself? The Alignment Pack at £3,500 plus VAT, or the Readiness Assessment from £1,950 plus VAT, credit in full against a Sprint started within six months.
You leave the call knowing your number.
Before you book
Forty five minutes with a senior practitioner. You describe the gate in front of you, the questionnaire, the clause, the customer email or the auditor's finding, and we work through what it actually requires, what you already have and where the gaps sit.
Yes. There is no charge and no obligation. It is not a sales call and not a scoping call, and there is no follow-up sequence unless you ask for one.
A short written summary sent the same day setting out what the gate requires, what you have in place, what is missing and the order we would tackle it in. It is yours to keep and use however you like, including with another supplier.
We agree the scope, then confirm the programme and the fee in writing before anything starts. If a diagnostic is all you need, that is a perfectly good outcome and nothing else happens.
That is the first thing the diagnostic settles. Enterprise procurement in the UK and EU asks for ISO 27001, US buyers for SOC 2, AI buyers increasingly for ISO 42001, the MoD for DCC, and public sector listings for Cyber Essentials. Most companies need one now and one later.
No. Goldline gets you ready. An independent, accredited certification body assesses and issues the certificate. The internal audit is included and carried out by an independent internal auditor appointed by Goldline, never by the team that built your system.