IT SECURITY

Fixed-price ISMS: Choose from 3 packages and achieve NIS2 or ISO 27001 readiness in just a few weeks

All packages are tailored individually to your organisation and your objectives – whether your focus is on NIS2, ISO 27001, TISAX, DORA or other standards.

  • Instant ISMS: A ready-to-use framework: build your ISMS independently and efficiently

  • ISMS ToGo: Joint implementation: reach your goal securely with expert support

  • ISMS Fullservice: End-to-end implementation: we deliver your completed, audit-ready ISMS

First step: Choose the ISMS package that best suits your needs

General ISMS

We are happy to develop an information security management system (ISMS) tailored to your needs and aligned with your objective. Whether you are aiming for NIS2 compliance, ISO 27001 certification, a TISAX assessment or an ISMS based on another standard – here you will find a complete overview.

 

Instant ISMS

Ideal for organisations that want to build their ISMS independently and need a ready-to-use framework to get started.

Fixed price: from EUR 10,000

  • 90% complete ISMS framework
  • Drafts, policies, templates and guidance documents
  • NIS2-ready in 8 to 16+ weeks
  • ISO 27001-ready in 16 to 28+ weeks
  • TISAX-ready in 16 to 28+ weeks

MOST POPULAR CHOICE

ISMS ToGo

The ideal solution for organisations that want to implement their ISMS together with experienced consultants.

Fixed price: from EUR 30,000

  • ISMS framework
  • Drafts, policies, templates and guidance documents
  • Joint implementation: 50/50
  • Workshops
  • Initial effectiveness checks
  • NIS2-ready in 8 to 12 weeks
  • ISO 27001-ready in 12 to 24 weeks
  • TISAX-ready in 12 to 24 weeks
  • Includes certification support or audit support

 

ISMS Full Service

We take care of the complete implementation of your ISMS. From planning through to certification readiness.

Fixed price: from EUR 45,000

  • End-to-end implementation
  • Project management
  • Individual customisation
  • Documentation
  • Workshops
  • Effectiveness checks
  • NIS2-ready in 6 to 10 weeks
  • ISO 27001-ready in 12 to 24 weeks
  • TISAX-ready in 12 to 24 weeks
  • Includes certification support or audit support

The packages in detail

Service

Instant ISMS

ISMS ToGo

ISMS Fullservice

ISMS framework
Policies, templates & guidelines
Risk, asset & measure registers
Implementation guide
Certification support optional
Implementation workshops optional
Support with register population optional
Effectiveness checks optional
Education & training optional optional
Individual customisation optional limited
Individual consulting optional limited
Preparation of documentation optional partially
Project management optional optional
NIS2 readiness 8–16+ weeks 8–12 weeks 6–10 weeks
ISO 27001 readiness 16–28+ weeks 12–24 weeks 12–24 weeks
TISAX readiness 16–28+ weeks 12–24 weeks 12–24 weeks
Price from €10,000 (plus VAT) from €30,000 (plus VAT) from €45,000 (plus VAT)
Free initial consultation inquire without obligation inquire without obligation inquire without obligation
Dr. Jan Scharfenberg – Geschäftsführer & Partner

Why choose ISiCO for your ISMS?

We look at IT security not only from a legal perspective, nor only from a technical one. Our team brings together leading legal experts, technology specialists and business professionals. This enables us to design and implement your ISMS in a way that is legally sound, technically robust and commercially sensible.

With our three packages, you can choose the type of support that best fits your organisation and your internal resources. This gives you clear control over both the costs and the effort required for your ISMS.

We always start with a free initial consultation to discuss which package is right for you and what the implementation process will look like in detail.

By the way: We can also build your ISMS as part of our engagement as your external Information Security Officer. This is a sensible option if you are looking for ongoing support or do not have a separate budget for an ISMS project.

Let’s talk with no obligation.

Yours, Dr Jan Scharfenberg

FAQ