Tidal Control incident
ISO 27001 costs: What does certification really cost your organisation?
Resolved on February 22, 2026.
ISO 27001 certification costs fall into three categories: internal time investment, the external audit, and ongoing maintenance. For most organisations the internal time investment is the largest item, not the audit fee. A small organisation with 10 to 25 employees can expect a total year-one investment of 8,000 to 20,000 euros. Scope, maturity and complexity drive costs more than headcount does.
Update timeline
- resolved Feb 22, 2026, 12:00 AM UTC
ISO 27001 certification costs fall into three categories: internal time investment, the external audit, and ongoing maintenance. For most organisations the internal time investment is the largest item, not the audit fee. A small organisation with 10 to 25 employees can expect a total year-one investment of 8,000 to 20,000 euros. Scope, maturity and complexity drive costs more than headcount does.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services