Your deal or bid is waiting on a security questionnaire.

What we do

• Read exactly what's being asked, and by when. We go through the whole questionnaire and the email it came with: the deadline, who will read your answers, and whether they ask for a certificate, a report or a policy by name.
• Answer from evidence you can stand behind. Every answer points to something that exists today: a policy, a setting, a record or a named person. Where a control isn't in place yet, the answer says so and says when it will be.
• Build a reusable answer library. The answers and the evidence behind them are kept in one place, so the next questionnaire starts from them.
• Say whether alignment or a certificate is actually needed. Some customers ask you to show alignment with a standard such as ISO 27001; others need the certificate itself or a SOC 2 report. We tell you which applies before you commit to either.

What you get

• A one-page gap note Mapped to ISO 27001 controls; it becomes the input to readiness or a Sprint.
• A 30-minute call Before anything goes to your customer.

What it is not

• Not a certificate
• Not a penetration test
• Nothing is sent to your customer without your sign-off

Goldline never writes a yes it cannot evidence.

Common questions

From £1,250, within 10 working days.