Question 1

[ZH] Does Aureliant provide ISO certification?

Accepted Answer

[ZH] No. We provide advisory-only support for framework design, implementation, internal audit and certification readiness. Certification is issued by independent accredited certification bodies.

Question 2

[ZH] Which ISO standards do you support?

Accepted Answer

[ZH] We commonly support ISO 27001, ISO 22301, ISO 31000, ISO 27701, ISO 42001, ISO 9001 and ISO 55001, plus integrated management system design where multiple standards apply.

Question 3

[ZH] How long does ISO certification readiness take?

Accepted Answer

[ZH] Timelines depend on scope, maturity and standard. A focused readiness review may take four to six weeks; full implementation programmes often run six to eighteen months before a certification audit.

Question 4

[ZH] What is the difference between ISO 27001 and ISO 27701?

Accepted Answer

[ZH] ISO 27001 defines an information security management system. ISO 27701 extends that model with privacy-specific controls and guidance for organisations processing personal data.

Question 5

[ZH] Can you help with ISO 42001 and AI governance?

Accepted Answer

[ZH] Yes. We advise on AI management system design, risk assessment, roles and evidence aligned to ISO 42001 principles alongside your broader governance and regulatory context.

Question 6

[ZH] Do you support integrated management systems?

Accepted Answer

[ZH] Yes. We design integrated structures so security, continuity, quality and privacy controls share governance, documentation and audit programmes where appropriate.

Question 7

[ZH] What does a gap assessment include?

Accepted Answer

[ZH] Document review, control testing samples, interviews with process owners and a prioritised gap report with remediation owners — suitable for board or audit committee briefing.

Question 8

[ZH] Can you support internal audit before certification?

Accepted Answer

[ZH] Yes. We can design and execute internal audit programmes or provide quality review of your internal audit outputs ahead of external certification audits.

Question 9

[ZH] How does ISO advisory relate to DORA and GDPR work?

Accepted Answer

[ZH] Many programmes intersect: ISO 27001 supports ICT and security governance narratives; privacy management aligns with GDPR expectations. We coordinate with our regulatory and data protection advisory teams without duplicating scope.

Question 10

[ZH] What engagement models are available?

Accepted Answer

[ZH] Fixed-fee readiness reviews, implementation advisory projects, internal audit support, certification preparation engagements and retained governance advisory.

Question 11

[ZH] Who should lead the engagement internally?

Accepted Answer

[ZH] A named executive sponsor plus process owners for each management system domain. We help define RACI and committee cadence so certification evidence is sustainable.

Question 12

[ZH] How do we start an ISO advisory enquiry?

Accepted Answer

[ZH] Use the contact form on this page or email info@aureliantglobal.com with your target standard, industry and desired timeline. We respond with a scoped proposal and named partner introduction.

[ZH] ISO Management Systems & Certification Advisory

[ZH] Request an ISO advisory proposal