
Closed
Posted
Poseo las observaciones emitidas por el certificador de ISO 27001 y busco a alguien que ya haya vivido este proceso desde una consultora o certificadora para que me guíe a cerrarlas con enfoque de PyME y el menor gasto posible. Mi equipo interno ejecutará los cambios; lo que necesito es tu criterio experimentado para: • Priorizar los hallazgos sobre políticas, procedimientos, riesgos, accesos y nuestro pequeño data center. • Afinar o redactar solo lo imprescindible para defender cada punto ante la auditoría. • Plantear una estrategia de control de accesos práctica y económica. • Pulir la matriz de riesgos y evidencias de mitigación. • Proponer acciones mínimas de mantenimiento al data center que cumplan la norma sin inversiones innecesarias. • Acompañarnos en el llenado de fichas y, si es necesario, preparar los argumentos que presentaremos al auditor. Valoraré que ya hayas presentado exitosamente empresas chicas o medianas ante organismos certificadores y que puedas demostrarlo con ejemplos concretos o referencias. La asesoría se puede realizar de forma remota y la estimación inicial es de unas pocas sesiones intensivas más revisión de documentos. Si dominas la norma, entiendes la realidad presupuestaria PyME y te sientes cómodo defendiendo cada decisión, espero tu propuesta detallando tu experiencia y metodología.
Project ID: 40717781
6 proposals
Remote project
Active 6 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
6 freelancers are bidding on average $20 USD/hour for this job

With my 15+ years of experience as a Project Management Expert and strong understanding of ISO 27001, I believe I can provide you the assistance you need to address the observations from your certifier with a balanced, cost-effective approach. I have successfully managed complex projects in the IT industry, including handling audits/compliance-related activities in alignment with ISO standards. My wide range of skills will be invaluable in this process as I'm adept at prioritizing tasks, documenting and defending policies/procedures, refining risk matrices, proposing cost-conscious actions for data centers, and navigating compliance in SMEs. Ensuring minimum investment without compromising security is always a top priority.I've also had the pleasure of successfully presenting several small and medium-sized companies to certifying bodies - a feat that has sharpened my ability to present articulate arguments effectively. Moreover, given that I am well-versed in remote collaboration, which is not only convenient in today's world but also reduces costs considerably. With all these skills and attributes, I am ready to hit the ground running; strategizing the best course for your unique situation and guiding your team through effective project management to obtain the necessary certification. Get in touch with me to discuss further the possibility of transforming your project into a seamless success story.
$20 USD in 40 days
7.3
7.3

Hello there! As someone who's navigated numerous ISO 27001 certifications, I'm confident in my ability to assist your organization flawlessly. My first-class understanding of both the ISO 27001 standard and budgetary constraints is backed by tangible accomplishments- successfully steering organizations through similar challenges with pinpoint accuracy and minimal expenditure. I possess the technical writing prowess to communicate and compose vital policies for efficient presentation, ensuring the most important points are strongly defended. In line with your project, I've always prioritized practical and cost-effective risk management strategies without compromising on compliance. My comprehensive document reviews will enable me to refine your existing matrix of risks and provide evidence-based mitigation plans. Additionally, my experience extends to filling documents effectively and crafting compelling arguments for auditors, always ensuring positive outcomes. From coordinating small projects to managing large-scale ones, my experience in Compliance and Technical Writing further sets me apart. I'm well aware of the PyME environment which provides me with a unique understanding of your needs, this coupled with my expertise should guarantee you incomparable results in this journey towards ISO 27001 compliance.
$20 USD in 40 days
6.3
6.3

Hi, I can help review and close your ISO 27001 certification findings with a practical, evidence-focused approach. I recently completed an ISO/IEC 17024 certification-scheme compliance project involving detailed documentation review, compliance mapping, gap identification, and corrective recommendations. I’m also currently working on an ongoing certification-body project involving certification-level mapping, assessment structure, MCQ governance, and supporting documentation. This experience has given me a strong understanding of how certification requirements need to be documented, mapped, evidenced, and presented for review. For your project, I would focus on addressing only the gaps necessary for the audit, keeping the solution practical and cost-conscious for a SME. Could you share the certifier’s observations/findings and your current ISO 27001 documentation? I can first assess the findings and identify which items require documentation changes, evidence, process changes, or technical controls. Best regards, Shabnam Akther
$25 USD in 40 days
4.5
4.5

Lima, Peru
Payment method verified
Member since Jan 15, 2019
$50-100 USD
$30-250 USD
$30-250 USD
$15-25 USD / hour
$10-30 USD
₹600-1500 INR
min $50 CAD / hour
$30-250 USD
$10-150 AUD
$1500-3000 USD
₹700-1500 INR / hour
$30-250 USD
₹12500-37500 INR
₹75000-150000 INR
$15-25 USD / hour
$1500-3000 USD
$50000-100000 USD
₹600-1500 INR
$250-750 USD
₹600-1500 INR
₹750-1250 INR / hour
$30-250 USD
₹750-1250 INR / hour
₹12500-37500 INR
£20-250 GBP