ISO 27001 AND ISO 42001, ONE SYSTEM
Asked for ISO 27001 and ISO 42001? One system covers both.
One ISO 27001 and ISO 42001 consultant: both standards on one management system, at one fixed published price.
Enter a valid work email.
You run one integrated management system instead of two, and you are ready for independent certification audits against both standards.
Integrated Sprint, ISO 27001 plus ISO 42001, £12,500 fixed, plus VAT
Plus VAT
No fee
One site or cloud hosted
What the diagnostic delivers
- A free 45-minute call with Alfred Obeng. No fee.
- A one-page roadmap you keep, whether or not you go further.
- A clear answer on scope, what your customer is actually asking for, and your fee.
- How the two standards share one system in your case, and where they do not.
How it works
Free 45-minute diagnostic.
We agree the standard, the scope and how you would like to pay. You keep the one-page roadmap.
Audit-ready.
Audit-ready in 8 to 12 weeks for a single entity up to 50 people in scope. The certification body sets its own Stage 1 and Stage 2 dates.
In week 1 we request quotations and Stage 1 and Stage 2 dates from three UKAS-accredited certification bodies, so you know your audit dates early. The body sets its own dates.
What the Sprint includes
Kickoff, scope and gap assessment
We agree the standard, the scope and the timeline in a focused kickoff, then review what you already do against the standard and turn the gaps into a dated remediation roadmap.
Your compliance platform, or ours
Runs on your compliance platform if you have one, or in our UK-hosted GRC workspace at no extra subscription.
Policies and the management system, built for you
Policies, the risk assessment and the control documentation your standard asks for, written around how your company actually works rather than copied from a template.
Trust centre
A customer-facing trust centre page showing the policies and controls you choose to share, so there's one link to send when a prospect asks about your security.
Internal audit, independent of the build
The internal audit is carried out by an independent internal auditor appointed by Goldline, never by the team that built your system.
Readiness review and support through the certification audit
A written summary of where you stand and what's left, then support through the certification audit and any findings. The certification body or the CPA firm makes its own decision.
One legal entity, up to 50 people in scope, one site or cloud hosted.
Is this you?
- Under 50 people, one legal entity
- A customer, an investor or a tender has asked, or is about to
- You use AI in your product and your customer wants both standards.
- A named owner who can give it four hours a week
Who does the work
Built with your named owner, about four hours a week, with Goldline directing the order and reviewing every artefact.
Alfred Obeng, founder of Goldline Consultancy Ltd, leads the work himself. You work with him directly, not with a rota of juniors. His credentials:
Pricing detail
| Integrated Sprint, ISO 27001 plus ISO 42001 | £12,500 fixed, plus VAT |
|---|---|
| Scope | One legal entity, up to 50 people in scope, one site or cloud hosted |
| Payments | Half at the start, half on delivery, or spread across the programme in instalments agreed on the diagnostic. |
| Certification body audit fee | Paid by you directly to the body, not a Goldline fee |
| GRC platform | Runs on your compliance platform if you have one, or in our UK-hosted GRC workspace at no extra subscription. |
Questions
How do the payments work?
The fee is fixed at the published price, plus VAT. Half at the start, half on delivery, or spread across the programme in instalments agreed on the diagnostic.
How long does it take?
Audit-ready in 8 to 12 weeks for a single entity up to 50 people in scope. The certification body sets its own Stage 1 and Stage 2 dates.
Is Goldline a certification body?
No. Goldline prepares you. An accredited body certifies you. Goldline never sells implementation and certification to the same organisation for the same scope.
Why one system for both?
ISO/IEC 42001 uses the same management system structure as ISO/IEC 27001: clauses 4 to 10 line up, so the system is built once and extended rather than run twice.
Book your free 45-minute diagnostic.
Free, 45 minutes, and you leave knowing your scope, your route and your fee.
Enter a valid work email.
Goldline is not a certification body. An independent, accredited body assesses and certifies.