Tidal Control incident
Planning your ISO 27001 journey: from start to certificate
Resolved on June 1, 2025.
Most ISO 27001 projects stall not from lack of knowledge or budget but from lack of planning: absent milestones, unclear time commitments, and no dedicated owner. A realistic journey runs five phases over twelve to eighteen weeks. Small organisations of ten to fifty people can reach certification in twelve to fourteen weeks; medium-sized organisations of fifty to two hundred fifty people should plan for sixteen to twenty-two weeks. A dedicated project leader available six to eight hours per week and management that makes decisions promptly are the two factors most likely to keep the project on schedule.
Update timeline
- resolved Jun 01, 2025, 12:00 AM UTC
Most ISO 27001 projects stall not from lack of knowledge or budget but from lack of planning: absent milestones, unclear time commitments, and no dedicated owner. A realistic journey runs five phases over twelve to eighteen weeks. Small organisations of ten to fifty people can reach certification in twelve to fourteen weeks; medium-sized organisations of fifty to two hundred fifty people should plan for sixteen to twenty-two weeks. A dedicated project leader available six to eight hours per week and management that makes decisions promptly are the two factors most likely to keep the project on schedule.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services