ISO 27001-Consulting

Q: Is our ISO 27001:2013 certificate still valid?

No. The transition period for certificates based on ISO/IEC 27001:2013 ended on October 31, 2025. Anyone who has not obtained a certificate based on the 2022 edition since then can no longer provide valid proof of compliance. The transition is typically handled as part of a surveillance or recertification audit.

Q: Does an ISO 27001 certificate meet the requirements of the GDPR?

Not automatically. Article 32 of the GDPR only accepts approved codes of conduct under Article 40 or an approved certification procedure under Article 42 as evidence; ISO 27001 is not included among these. A certified ISMS supports the demonstration of technical and organizational measures but does not replace it.

Q: Who conducts the certification audit?

An accredited certification body, not the consulting firm. In Germany, accreditation is granted by DAkkS in accordance with DIN EN ISO/IEC 17021-1. To ensure impartiality, consulting and certification services for the same company must not be provided by the same entity. We prepare you for the audit and support you throughout the process.

Your path to successful certification

Rising customer expectations, regulatory pressure, and growing cyber risks: An Information Security Management System (ISMS) compliant with ISO 27001 is a critical success factor for many companies today.

With a certified ISMS, you not only meet the requirements of the GDPR (Art. 32), but also strengthen your customers’ trust and your competitive position in the long term.

Your benefits at a glance

Meeting customer requirements and gaining access to new business
Demonstrable information security and compliance
Competitive advantages in bidding processes
Reduction of risks and security incidents
Clear processes, responsibilities, and structures

Our ISO 27001 consulting: pragmatic, efficient, and focused on certification

We support you exactly where you are – from the initial concept to successful certification:

Establishing a lean and effective n ISMS
Conducting risk analyses and assessing security needs
Preparing audit-ready documentation and guidelines
Establishing processes and governance structures
Training your employees (security awareness)
Preparation for and support during certification audits

Our approach: No “over-engineering” – just an ISMS that works in everyday operations.

Optional: External Information Security Officer (ISO)

An ISMS thrives on continuous operation (PDCA cycle). If you lack the internal resources, we’ll take on the role of Information Security Officer for you:

Management and Further Development of Your ISMS
Preparation for and Support During Audits
Support during security incidents and implementation of corrective measures

This ensures that your ISMS remains effective over the long term – without overburdening your internal team.

Why abat?

With abat, you’re partnering with an experienced and certified provider:

ISO 27001 auditors
Extensive project experience in regulated and KRITIS-related environments
Our own certified management systems (ISO 9001, ISO 27001, TISAX®)

We know what auditors look for – and how you can efficiently obtain certification.

The next step: Get started now

We’ll guide you from the initial assessment all the way to successful certification by an accredited audit service provider.
Talk to us about your project – with no obligation and a practical approach.

FAQs

What is ISO 27001?

ISO/IEC 27001 is the international standard for information security management systems. It describes requirements for establishing, operating, and improving an ISMS and includes a catalog of security measures in Annex A. The 2022 edition is currently in effect, supplemented by Amendment 1:2024 on climate aspects.

Is our ISO 27001:2013 certificate still valid?

Does an ISO 27001 certificate meet the requirements of the GDPR?

Who conducts the certification audit?

TISAX^® is a registered trademark of the ENX Association. The mention of the TISAX^® trademark does not imply any statement by the trademark owner regarding the suitability of the services advertised here. The exclusive responsibility for the content of the website and the services presented here lies with abat.

Our customers in the area protect

Saskia

ISMS Consultant
Bremen

For me, abat is: fun, exciting projects - great customers and colleagues packed into a respectful and trusting atmosphere with plenty of room for continuous development!