VANTA IMPLEMENTATION
ISO 27001 and ISO 42001, built inside your Vanta account.
Goldline sets the scope, writes the risk assessment, Statement of Applicability and policies, and configures Vanta around them, so the evidence it collects is the evidence your auditor asks for.
Already on a platform and not audit-ready? Platform Rescue
Loading the calendar
Open the booking pageCalendar not loading? Open Calendly directly
- Cyber Essentials Certified
- JOSCAR Registered
- Companies House 10901798
WHAT'S INCLUDED
What the Vanta implementation includes
Six elements. Vanta collects the evidence; the scope, the risk decisions and the policies still have to be written for your business.
Scope and boundary
The management system scope agreed first, so Vanta's tests and integrations cover what the certificate will cover.
Integrations connected
Your cloud, identity, code and HR systems connected and checked, in your own Vanta account.
Control mapping
Vanta's controls mapped to your Statement of Applicability, with custom controls where your scope needs them.
Policies written for your business
Policies drafted for how you actually operate, and reviewed before they go to your team.
Evidence no integration can reach
Manual workflows for the risk assessment, management review and supplier review, kept in the platform.
Audit handover
Surveillance, internal audit and renewal dates set in the platform, and the certification body engagement coordinated.
OUTCOMES
What you walk away with
Tangible outcomes at programme completion.
Vanta running against your real scope
Integrations live, tests passing against the controls you actually need.
An audit-ready evidence set
Evidence assembled in Vanta for Stage 1 and Stage 2.
A team that can run it
Your owner trained to operate the platform without outside help.
Room for ISO 42001
ISO 42001 uses the same management system structure as ISO 27001, so it can be added on the same foundation.
A defined next step
A route into the Managed Compliance Retainer once the certificate is issued.
METHODOLOGY
How Goldline delivers Vanta Implementation
Five phases, from scoping to audit handover. The sequence is fixed. The timeline is set at the free diagnostic.
PHASE 01
Scoping
Scope, boundary, frameworks and in-scope systems agreed at kickoff.
- Scope statement
- Integration plan
- Control set
PHASE 02
Platform configuration
Vanta integrations connected and checked, controls mapped to the Statement of Applicability.
- Integrations live
- Controls mapped
- Tests reviewed
PHASE 03
Control implementation
Risk assessment completed, policies written and published, manual evidence workflows running.
- Risk assessment
- Policies published
- Evidence workflows
PHASE 04
Review and training
A readiness review against the standard, and your owner trained on the platform. The clause 9.2 internal audit is carried out by someone independent of the build.
- Readiness review
- Owner trained
- Internal audit arranged
PHASE 05
Audit handover
Certification body engagement coordinated and support through Stage 1 and Stage 2.
- Audit dates set
- Operations runbook
- Handover complete
What you get from a Goldline Vanta Implementation
Four things that separate an implementation from platform onboarding.
Senior practitioner delivery
The person who scopes it is the person who delivers it.
Fixed after scoping
The fee is set at the diagnostic and does not move unless the scope changes and both parties agree in writing.
Written for your business
Scope, risk assessment, Statement of Applicability and policies written for how you operate, not taken from a template.
Independence kept
Goldline does not audit a management system it implemented, and does not certify.
FREQUENTLY ASKED
Frequently Asked Questions
Set Vanta up for a real audit
The scope and policies first, then the platform around them.
45 minutes, video, with the practitioner who would do the work. No sales pitch.