# ISO 27001, guaranteed | Secured by FM CyberSecurity > Large customers and public buyers want to see ISO 27001 before they sign. We take you all the way, with a guarantee. One vendor, one contract, one price. Source: https://fmcybersecurity.com/en/secured/ Locale: English Other locale: https://fmcybersecurity.com/secured/ Large customers and public buyers want to see ISO 27001 before they sign. Secured by FM CyberSecurity takes on the whole job: a vCISO who keeps you on track and helps with tenders, our own SOC, and a full package of security products. One vendor, one contract, one price. ## How it works You do not need your own security team. You plug into our platform and our people, and get a vCISO who keeps you on track. - Setup and operations: We map your organization and onboard you onto our platform, with security products and GRC tooling. We run everything for you, and our own SOC monitors around the clock. You get your own login to every tool. - ISO 27001 and NIS2: We find out what is missing, write the documentation and get you ready for the audit. You do not have to write the policies yourself, and the same work covers NIS2. - Certified and tender-ready: An accredited certification body performs the audit. If it does not go through within the agreed time, we cover the next attempt. The certificate is what you attach to your next bid. - Roadmap and risk: We build a roadmap with you and track the risks that matter most. Every month you see what is done, what is left and what is urgent. - Your own vCISO: You get a named advisor who knows your business. They help you with tenders, support your management team and keep your security initiatives moving. We handle recertification in year two and three. ## What you get We deliver the whole package as one service. - Our own 24/7 SOC: Our own SOC monitors and responds around the clock. It is built on CrowdStrike and driven by agentic AI. - Exposure management: Tenable finds and prioritizes vulnerabilities across your systems. You see what needs fixing first. - Application security: Aikido secures the code you build. FM CyberSecurity produces pentest reports you can show your customers. - vCISO: A senior security advisor who knows your business and sets priorities with you. - Monthly reports: Every month you get a report: status, incidents, vulnerabilities and what we recommend next. - GRC tool: One place for controls, evidence and audit trail. Everything the auditor needs to see, ready for the audit. ## How the guarantee works ISO 27001 is the proof customers and tenders ask for. We build the management system, the documentation and the controls together with you. If the audit does not go through within the agreed time, we cover the next attempt. *Gross negligence on the customer side voids the guarantee. The work counts twice: the same controls are the documentation you need for NIS2. ## Built for organizations that want to win bigger contracts - Small and medium-sized businesses. - You lose tenders because you lack ISO 27001 certification. - You do not have your own security team, and you do not need to build one. - You are covered by NIS2, or you supply someone who is. ## Certification-ready in four to six weeks The pace depends mostly on how quickly you answer our questions. - Week 1, Onboarding: We gather the information we need and connect your systems to the platform. - Week 2, Up and running: The tools are live. We fill the GRC tool with controls and documentation. - Week 3 to 6, Certification-ready: The management system is in place. You are ready for the audit. ## Common questions - Who monitors our systems at night? Our own SOC monitors around the clock, built on CrowdStrike and driven by agentic AI. Our analysts follow up directly between 09:00 and 15:00. Outside working hours the system alerts our on-call team, and on a critical attack the SOC takes the case straight away. Your vCISO then takes the findings forward with you. - What happens if the audit does not pass? Then FM CyberSecurity covers your next certification attempt. Gross negligence on the customer side voids the guarantee. - What does it cost? One fixed monthly price covers the tools, the operations, the vCISO and the certification work. The accredited certification body carries out and bills the audit itself. Send us a message and we will price it for your organization. - How fast can we get certified? Expect four to six weeks before you are certification-ready. How long it takes depends mostly on how quickly you answer our questions. An accredited certification body performs the audit after that. ## Not ready yet? Read more first - [What ISO 27001 is, and why you lose tenders without it](/en/insights/compliance/what-iso-27001-is-and-why-tenders-require-it/) - [ISO 27001 checklist for Norwegian SMBs](/en/insights/compliance/iso-27001-checklist-for-norwegian-smbs/) - [What NIS2 is, and which Norwegian businesses fall under it](/en/insights/compliance/what-nis2-is-and-who-it-covers-in-norway/) --- For the full documentation index, see https://fmcybersecurity.com/llms.txt For the complete corpus as a single document, see https://fmcybersecurity.com/llms-full.txt