UK · PUBLISHED · FIXED AFTER SCOPING
Every price Goldline charges, published. Fixed after scoping, no setup fees, readiness assessments credit in full against a Sprint. Your certification body's audit fee is separate and paid to it directly.
5-star client reviews
Read them on G2CISSP, ISO 27001 Lead Implementer and Lead Auditor, ISO 42001 Lead Implementer and Lead Auditor, PMP.
Published
every price on this page
Fixed
after scoping, in writing
£0
setup fees
IMPLEMENTATION SPRINTS
ISO 27001 Sprint
£7,000 fixed, plus VAT
Your first certificate. A named owner and four hours a week.
Half at the start, half on delivery
Integrated Sprint
£12,500 fixed, plus VAT
One management system for ISO 27001 with ISO 42001 or ISO 9001.
Half at the start, half on delivery
ISO 42001 Sprint
£7,000 fixed, plus VAT
The AI half, for teams that already hold ISO 27001.
Half at the start, half on delivery
The fixed fee covers a single legal entity, up to 50 people in scope, one site or cloud hosted. A larger or multi-entity scope is scoped on the free diagnostic.
START HERE
ISO 27001 Sprint
£7,000 fixed, plus VAT
View programmeIntegrated Sprint
£12,500 fixed, plus VAT
View programmeISO 42001 Sprint
£7,000 fixed, plus VAT
View programmePUBLISHED PRICES
| Service | From | Duration | Best for | Action |
|---|---|---|---|---|
| Implementation Sprints | ||||
First Security Questionnaire
Over 200 questions, or a second questionnaire in the same quarter, £750. The £1,250 is credited in full against any Sprint started within 90 days. | £1,250 | Within 10 working days | Book the free diagnostic | |
| Free 45 minute diagnosticStart here | No fee | 45 minutes | Confirming scope and route | Book |
| ISO 27001 Sprint | £7,000 | 8 to 12 weeks | A single entity under 50 people needing ISO 27001 | Enquire |
| ISO 42001 Sprint | £7,000 | 8 to 12 weeks | A single entity under 50 people needing ISO 42001 | Enquire |
SOC 2 Sprint
| £7,000 fixed, plus VAT | Agreed on the diagnostic | For selling to US customers | Enquire |
| Integrated Sprint (ISO 27001 with ISO 42001 or ISO 9001) | £12,500 | 8 to 12 weeks | Two certificates, one management system | Enquire |
| ISO 9001 with ISO 27001 | £12,500, as Integrated Sprint | 8 to 12 weeks | You are asked for ISO 9001 as well as ISO 27001 | Enquire |
| The fixed fee covers a single legal entity, up to 50 people in scope, one site or cloud hosted. A larger or multi-entity scope is scoped on the free diagnostic. | ||||
| Readiness and assessment | ||||
| ISO 27001 Readiness Assessment | From £1,950 | Set at the free diagnostic | Setting the boundary before you commit | Enquire |
ISO 27001 Alignment Pack
Credited in full against a Sprint started within six months. An alignment summary is a consultant's statement, not a certification. Half at start, half on delivery. | £3,500 fixed | 3 to 4 weeks | Book the free diagnostic | |
| AI Governance Readiness Assessment | From £2,500 | Set at the free diagnostic | ISO 42001 or an AI questionnaire | Enquire |
| Integrated DPIA and AI Impact Assessment | From £4,000 | Set at the free diagnostic | A high-risk processing or AI use case | Enquire |
| AI Trust Evidence Pack | From £5,000 | Set at the free diagnostic | Answering an enterprise AI questionnaire | Enquire |
| Audit, assurance and defence | ||||
| DCC Requirement and Scope Review | From £1,950 | Set at the free diagnostic | A prime has raised DEFCON 658 | Enquire |
| Pre-Certification Readiness Audit | From £3,500 | Set at the free diagnostic | You think you are ready and want it tested | Enquire |
| ISO 42001 Internal Audit | From £4,500 | Set at the free diagnostic | Clause 9.2 on an AI management system | Enquire |
| DCC Level 1 Readiness Diagnostic | From £4,500 | 4 to 8 days | Reaching Cyber Risk Profile Level 1 | Enquire |
| ISO 27001 Internal Audit | From £2,950 | Set at the free diagnostic | Clause 9.2, priced by boundary size and control set | Enquire |
| Recertification readiness | £5,500 | Set at the free diagnostic | Before your ISO 27001 recertification audit | Enquire |
| Combined ISO 27001 and ISO 42001 Internal Audit | Scoped on the diagnostic | Set at the free diagnostic | Both management systems audited in one engagement | Enquire |
| Stage 2 Audit Defence | Scoped on the diagnostic | Duration of the audit | The audit is booked and you want cover | Enquire |
| DCC Level 0 Readiness Diagnostic | Scoped on the diagnostic | 2 to 4 days | Establishing the Level 0 position | Enquire |
| Ongoing | ||||
| Managed Compliance Retainer, one standard | From £1,450 per month | 12 month minimum | Keeping one certified system running | Enquire |
| Managed Compliance Retainer, integrated | From £1,950 per month | 12 month minimum | ISO 27001 and ISO 42001 on one schedule | Enquire |
| Annual internal audit and management review retainer | £3,950 a year | Annual | Internal audit and management review each year | Enquire |
| Vulnerability scanning | Priced at the diagnostic | Monthly external, quarterly internal | Findings entered in the nonconformity register | Enquire |
| Fractional AI Governance Lead | From £4,250 per month | 3 month minimum | You need the role, not the headcount | Enquire |
£1,250
Over 200 questions, or a second questionnaire in the same quarter, £750. The £1,250 is credited in full against any Sprint started within 90 days.
No fee
£7,000
£7,000
£7,000 fixed, plus VAT
£12,500
£12,500, as Integrated Sprint
The fixed fee covers a single legal entity, up to 50 people in scope, one site or cloud hosted. A larger or multi-entity scope is scoped on the free diagnostic.
From £1,950
£3,500 fixed
Credited in full against a Sprint started within six months.
An alignment summary is a consultant's statement, not a certification.
Half at start, half on delivery.
From £2,500
From £4,000
From £5,000
From £1,950
From £3,500
From £4,500
From £4,500
From £2,950
£5,500
Scoped on the diagnostic
Scoped on the diagnostic
Scoped on the diagnostic
From £1,450 per month
From £1,950 per month
£3,950 a year
Priced at the diagnostic
From £4,250 per month
All figures exclude VAT.
CERTIFICATION BODY
Audit days are set by people in scope under ISO/IEC 27006-1:2024 Annex C. The audit fee is paid to the certification body directly.
| People in scope | Audit days |
|---|---|
| 1 to 10 | 5 |
| 11 to 15 | 6 |
| 16 to 25 | 7 |
| 26 to 45 | 8.5 |
| 46 to 65 | 10 |
| 66 to 85 | 11 |
| 86 to 125 | 12 |
| 126 to 175 | 13 |
| 176 to 275 | 14 |
Run the ISO 27001 Cost Calculator.
This is an estimate, not a quotation.
CONSTANTS
01
Fixed. Scope confirmed on the free diagnostic.
02
Every readiness assessment credits in full against any Sprint started within twelve months.
03
No mobilisation charge and no unagreed change fees.
04
Certification body audit fees are billed separately and paid to that body directly.
05
The person who scopes it is the person who delivers it.
Trusted by
Goldline is not a certification body. An independent, accredited body assesses and certifies.
QUESTIONS
Published prices. Free diagnostic.
Book the free diagnosticWe use cookies and similar technologies to measure how this site is used, to see which organisations visit and to measure our advertising. Until you choose, Google tags run in a consent-limited mode that sets no cookies. If you accept, we load Google Analytics 4 and Google Ads with cookies, PostHog, Plausible, Microsoft Clarity, which records session replays, and Apollo. Read our Cookies policy.