I will do an ISO 27001 or NIST CSF gap assessment and write security policies

in 7 days, with 2 revisions

You must sign in to purchase

$30 START DISCUSSION

Service Description

Need to prepare for ISO 27001, satisfy a client's security questionnaire, or meet local requirements like PISF? I will assess where you stand and give you a practical roadmap.

What you get:
- Gap assessment against ISO 27001:2022 Annex A, NIST CSF 2.0 or PISF controls
- Control-by-control maturity scoring in Excel
- Prioritized remediation roadmap (quick wins first)
- Core security policies tailored to your business: Information Security Policy, Access Control, Acceptable Use, Incident Response, Backup, Password policy

Basic package (this price): gap assessment for a small business (up to ~25 staff) against one framework + 3 core policies.

About me: cybersecurity student at Air University Islamabad focused on GRC; I have built risk-assessment and multi-framework mapping tools (ISO 27001, NIST CSF, PISF, IEC 62443) and published academic work on NIST CSF 2.0 governance.

Technology Used

ISO/IEC 27001:2022, ISO 27002, NIST CSF 2.0, PISF, IEC 62443, CIS Controls, Secure Controls Framework (SCF), Excel risk registers, Word/Google Docs

Frequently Asked Questions

Q: Will this make me certified?
A: Certification is issued by an accredited auditor. My assessment and policies prepare you for that audit.

Q: Do you need access to our systems?
A: No. The assessment is done through a questionnaire and short interviews.

Q: Can you handle larger organizations?
A: Yes, message me for a custom quote.