Customers and partners often ask for ISO 27001 before they trust you with their data. Naq sets up most of the work for you, then checks your evidence every night.
ISO 27001 with Naq, a three-minute walkthrough of the product · Narrated, with captions
ISO 27001 is the international standard for keeping information secure. An accredited certification body audits you, and the certificate shows customers that you manage security properly.
The security controls the standard lists in its Annex A, from access control to backups.
The certification audit checks your documents first, then checks that you work the way they say.
The certificate lasts three years, with a surveillance audit every year in between.
This is everything ISO 27001 asks of you. For each step, here is what you do and what Naq does.
Write down what your certificate covers, and what it leaves out.
Sets up ISO 27001 for your whole organisation, with all 116 requirements mapped to 79 ready-made controls.
Connect Google Workspace or Microsoft 365.
Finds your devices and the cloud services your people use, ready for your registers.
List what could go wrong, such as a supplier data breach, and choose how you will reduce it.
Scores each risk by how likely and how serious it is, and flags any risk that has no owner.
Review the policies, approve them, and send them to all staff.
Gives you 48 ready-written ISO 27001 templates, from access control to backups, and tracks who has read and acknowledged each one.
Assign the courses to a whole team at once.
Includes 13 security and privacy courses for ISO 27001, and shows at a glance who is overdue.
Add the evidence that only you have, such as a backup report.
Links your evidence to each control and checks it every night, so a lapsed policy review is flagged before your auditor finds it.
Book your audit with an accredited certification body.
Before the audit, the Naq Assistant tells you what is still missing, from your own records.
Naq links your evidence to the right controls and checks it every night. A lapsed policy review or a risk with no owner is flagged before your auditor finds it.
Document · linked by Naq
Checks
Real checks from the ISO 27001 controls in Naq. The results shown are illustrative.
Publish your ISO 27001 controls and documents on your own Trust Centre. Customers answer their own questions, so their security questionnaires get shorter.
They see which controls are in place, without a call or a spreadsheet.
For example your information security policy, with their name and the reason they need it.
Naq emails them a link straight away.
Mapped to ISO/IEC 27001:2022.
And 70 more, across every clause and Annex A theme.
And 39 more, covering privacy, people and technology.
Every document you link as evidence is also checked automatically: its current version must be approved, staff acknowledgements must be complete, and its review date must not have passed.
Built from the Naq control library for ISO/IEC 27001:2022.
See the seven steps in your own workspace, with your own data.
