We work with a number of governmental entities and are often asked for ISO-27001 certification as part of an RFP process. So far we've managed by maintaining our own set of ISO27k artifacts, but I now have the budget to hire a consultant to get us through full certification.
- Has anyone gone through this with a consultant they would recommend?
- Has anyone gone through this at a fully remote org?