A prospect sends over their security questionnaire, and the first question is "Are you ISO 27001 compliant?" You're not. So now you're reading about Annex A, Statements of Applicability and certification bodies, and none of it tells you what this will actually take.

ISO 27001 certifies a management system: how you identify risk, choose your controls and keep improving them year after year. That shapes what you scope, what you document and how much of your engineering team's time it really needs. This webinar will walk you through all of it.

Kobalt.io has built compliance programs for 1,600+ organizations. Join us for an online session that will describe what a first ISO 27001 certification looks like, start to finish, in plain English. No framework theory. No pitch.

On the agenda:

• The sequence. Gap assessment, building your ISMS, internal audit and management review. Then the Stage 1 and Stage 2 audits with your certification body. We'll show you where the calendar actually goes.
• Scoping your ISMS. Scope too wide and you're certifying parts of the business no buyer asked about. Scope too narrow and the certificate won't satisfy the customer who asked for it.
• Risk assessment and the Statement of Applicability. ISO gives you 93 Annex A controls and asks you to justify which ones apply. First-timers have a tendency to over-build. We'll show you how to make the call.
• The real cost. Certification body fees, tooling and the engineering hours nobody budgets for. Plus what comes after year one: annual surveillance audits and recertification every three years.

Free, 45 minutes, everyone that registers gets the recording and 2026 ISO 27001 Playbook.