ISO 27001 and SOC 2 Readiness and Recovery
A clearer route to readiness.
Starting a programme—or bringing one back on track? Establish what is missing, what matters most and who needs to act, with a realistic plan for controls, evidence and assessment preparation.
ISO 27001 consultant support and SOC 2 readiness work are scoped around your organisation, its customer commitments and the requirements of the external assessment.
When this support helps
A customer or board deadline is approaching without a clear plan; a programme has stalled; evidence is incomplete; or assessment findings need a coordinated response. You need to understand your current position and the work required to move forward.
What you receive
Deliverables are selected for the agreed framework and scope, and can include:
- A diagnostic gap and readiness assessment.
- A control and evidence map showing what is available and what is missing.
- A prioritised readiness or recovery plan, with agreed owners and milestones.
- A remediation tracker and an assessment-preparation briefing.
How engagements work
Diagnostic review: establish the current position, material gaps and priorities.
Readiness project: clarify scope, plan control and evidence preparation, and review progress.
Remediation and recovery advisory: help your teams prioritise, coordinate and review corrective work where gaps remain or a programme has stalled.
These can be commissioned separately or combined in an agreed programme.
Scope and responsibilities
Your organisation owns control operation, evidence accuracy and remediation. Fortuna Systems advises on scope, readiness and improvement, and can support coordination with your chosen external assessors. Responsibilities and deliverables are agreed before work begins.
Formal ISO 27001 certification and independent SOC 2 attestation remain with the relevant external bodies. Fortuna Systems does not act as a certification body or provide an independent SOC 2 audit opinion. Advisory support does not guarantee a certification or attestation outcome.
Start a conversation
Tell us which framework you are working towards, any relevant deadline and whether the programme is new, underway or stalled. We can start with a confidential, no-obligation discussion.