ISO 27001 · San Francisco, California
IAF Consultancy audits information security for companies with sites in San Francisco, California. An accredited certification body issues the ISO 27001 certificate.
Last reviewed .
San Francisco's employers include technology and professional services. Companies there use ISO 27001 when a customer, a regulator, or a tender asks for a certified information security system.
IAF Consultancy does not publish a local office address. The audit visits the sites named in the scope. Those sites can be in San Francisco. The written offer states the scope, the timing, and the price before any visit is booked.
An information security audit tests the risk assessment against real access, real suppliers, and a real incident path. The path is the same in San Francisco as it is anywhere else we audit.
| Step | What happens |
|---|---|
| Submit application | Name the company, the sites, and the standard you want certified. |
| Offer and contract | The offer states scope, timing, and price. The audit is booked after you sign. |
| Stage 1 | The documented system is reviewed, and gaps are named before Stage 2. |
| Stage 2 | The system is audited as it runs. Findings say what must be closed. |
| Certification issuing | An accredited certification body issues the certificate. |
| Surveillance and re-certification | Later visits check that the system still works. Re-certification renews the cycle. |
The eight steps, including both surveillance visits, are set out in how certification works. To start, apply for ISO 27001 certification.
A recommendation is not the certificate. When the audit supports certification, an accredited certification body issues it. Clients and tenders in San Francisco are checking for that certificate.
ISO 27001 certification in San Francisco is a third-party audit of a company's information security system. IAF Consultancy carries out the audit for sites in scope, including sites in San Francisco, California. An accredited certification body issues the certificate. IAF Consultancy does not.
The company applies, accepts a written offer, and completes Stage 1 and Stage 2. An information security audit tests the risk assessment against real access, real suppliers, and a real incident path. When the audit supports certification, an accredited certification body issues the certificate. Surveillance visits follow.
An accredited certification body issues the ISO 27001 certificate. IAF Consultancy performs the audit and can recommend certification when the audit supports it. A recommendation is not the certificate.
How these standards differ by industry is in how ISO certification helps businesses.
IAF Consultancy