SERVICES
Most organisations enter at a readiness assessment and progress into implementation. Some arrive already certified and need assurance or upkeep. Every stage is delivered by the same senior practitioner.
DIAGNOSE
A scoped diagnostic before a scoped programme. Fixed price, fixed deliverable, no obligation to proceed.
A customer, investor or procurement questionnaire answered with evidence when no certificate is in place yet.
£1,250
Learn moreISO 42001 gap analysis, AI system inventory, EU AI Act risk classification, and a board-ready report with remediation roadmap.
From £2,500
Learn moreISMS gap analysis against ISO 27001:2022 Annex A, scope and Statement of Applicability outline, and a prioritised remediation roadmap.
From £1,950
Learn moreOne combined assessment for a high-risk processing or AI use case.
From £4,000
Learn moreFive AI governance artefacts built to answer enterprise AI security questionnaires and investor diligence.
From £5,000
Learn moreDefence cyber gap assessment, evidence review, prioritised remediation plan and assessment roadmap.
Scoped on the diagnostic
Learn moreEvery readiness assessment credits in full against any Sprint started within twelve months. The First Security Questionnaire credits in full against any Sprint started within 90 days.
IMPLEMENT
Fixed-scope senior practitioner programmes. Delivered on your GRC platform of choice, or ours.
ISO 27001 SPRINT
£7,000 fixed, plus VAT
The information security management system, built by Goldline with your named owner.
Single legal entity, up to 50 people in scope, one site or cloud hosted.
Explore the ISO 27001 SprintISO 42001 SPRINT
£7,000 fixed, plus VAT
The AI management system, built by Goldline with your named owner.
Single legal entity, up to 50 people in scope, one site or cloud hosted.
Explore the ISO 42001 SprintINTEGRATED SPRINT
£12,500 fixed, plus VAT
One management system for ISO 27001 with ISO 42001 or ISO 9001.
Single legal entity, up to 50 people in scope, one site or cloud hosted.
Explore the Integrated SprintAlready hold ISO 9001, or asked for both? See the ISO 9001 extension.
ASSURE
Independent assurance before the certification body sees it, and practitioner support when it does. Audits are conducted by a practitioner holding Lead Auditor credentials (PECB) for both ISO 27001 and ISO 42001.
A mock audit against the certification body's Stage 1 and Stage 2 criteria, with findings, severity ratings, and a remediation plan before submission.
From £3,500
Learn moreSenior practitioner attendance at certification audit, evidence presentation, auditor liaison, and management of findings through to closure.
Scoped on the diagnostic
Learn moreIndependent internal audit of your ISMS against ISO 27001:2022, delivered to certification body evidence standard, with audit report and nonconformity tracking.
From £2,950
Learn moreIndependent internal audit of your AI Management System against ISO 42001, covering AIMS controls, AI risk treatment, and lifecycle governance.
From £4,500
Learn moreINDEPENDENCE
Goldline does not conduct internal audits of management systems it implemented. An internal audit that reports on the implementer's own work is not an audit, and a certification body reviewing your clause 9.2 evidence will see that immediately. Our internal audit clients are organisations we did not implement for.
Preparation is a different question. A Pre-Certification Readiness Audit is a rehearsal, not an assurance opinion, so we run those for our own implementation clients as a matter of course. The distinction is the one your certification body draws: preparing for an audit is support, forming an independent opinion on the system is assurance, and the same party should not do both.
Internal audit independence is maintained. Where Goldline has implemented the management system, internal audit scope is agreed at engagement to preserve the separation your certification body expects.
SUSTAIN
For certified organisations without an internal compliance hire.
Certification renewals, governance upkeep and security questionnaire responses. 12 month minimum.
From £1,450 per month
Learn moreISO 27001 and ISO 42001 maintained on one schedule. 12 month minimum.
From £1,950 per month
Learn more12 month minimum. Scope calibrated to your certification portfolio and questionnaire volume.
LEAD
Where the requirement is not a project but a named accountable person, delivered at the fraction of time the role actually takes.
The accountable owner of an AI Management System. AI inventory, risk classification, impact assessment, human oversight design, and governance reporting to the board.
From £4,250 per month
Learn moreSee how fractional leadership works, including the operating cadence, and what a full-time hire costs by comparison.
The same senior practitioner delivers every stage.
Certification body audit fees are billed separately and pass through at cost. Goldline works inside whichever compliance platform you use, or without one. Platform licences are quoted separately and set out in full in your engagement letter.
What a buyer asks for differs by sector. These pages set out what the requirement usually looks like and which programme answers it.
All prices exclude VAT.
A free 45 minute diagnostic establishes which layer fits your current position. No sales pitch. If we are not the right fit, we will tell you and recommend the alternative.
We use cookies and similar technologies to measure how this site is used, to see which organisations visit and to measure our advertising. Until you choose, Google tags run in a consent-limited mode that sets no cookies. If you accept, we load Google Analytics 4 and Google Ads with cookies, PostHog, Plausible, Microsoft Clarity, which records session replays, and Apollo. Read our Cookies policy.