Tel +852 5382 0328 info@safeharbour.hk WhatsApp 繁體中文
Safe Harbour Consultants · Hong Kong & Macau Get a Quote
ISO standards

What affects the cost of ISO 27001 readiness in Hong Kong

There are two fees, and they are charged by two different organisations. Understanding which is which prevents most of the arguments that happen later.

The two fees

The certification fee is charged by the accredited certification body that audits you and issues the certificate. Our consultancy fee covers gap analysis, documentation, training, internal audit and audit support.

What moves the number

  • Number of locations and how different they are.
  • Whether the scope includes cloud infrastructure and third-party providers.
  • How much documentation already exists and whether anyone follows it.
  • Whether remediation involves buying tools or changing systems.
  • Whether you want certification or internal assurance only.

What this means for you

Two quotes for the same company can differ by a factor of three without either being wrong. Ask what scope each one assumes.

The most expensive line item is usually the tender you did not win because the requirement appeared and the evidence did not exist. Certification takes months, not weeks, so the time to start is before the requirement appears.

Sources
Gabriel Consultant — gabriel.hk
MSCi — mscincorporation.com