ISO 27001 implementation
ISMS implementation built around your scope and risks.
Govern / New Zealand
Connect organisational objectives, risks, responsibilities and working controls. Governance and implementation support is scoped around the systems you operate and the evidence your stakeholders need.
Choose the work
How we scope engagements
We agree the systems, criteria and evidence before proposing the work. A separate technical assessment may be needed to answer a question an internal audit cannot resolve, and a training course is not a substitute for operating a control.
Implementation, internal audit and external certification have different responsibilities. Audit assignments require competence and impartiality checks. Aegentra does not issue organisational ISO certificates or independent SOC 2 examination reports.
We deliver online and arrange visits by appointment where agreed. Scope, assigned competence, timing, access requirements and any travel are confirmed before an engagement.
Planning an engagement
Start with the decision or evidence you need. Implementation builds a system; internal audit evaluates defined criteria and evidence; hardening changes technical controls; operational support maintains agreed services. An initial discussion can establish the appropriate scope without assuming you need every service.
No. Academy courses are individual learning packages with their own formats and prices. Consulting, testing and audit engagements have separately agreed objectives, responsibilities and commercial terms. A course price must not be read as a project quotation.
Service pricing is provided by scoped quote, not the Academy’s per-learner course prices. The proposal identifies deliverables, assumptions, exclusions, responsibilities and commercial terms. No fixed price or completion date is promised before the scope is understood.
Discuss your requirement
Start with the requirement, the systems involved and the outcome you need. Please do not send passwords, sensitive records or unrestricted tenant access in an initial enquiry.