Compliance & risk
ISO 27001
Quick answer
ISO 27001 certifies your ISMS. Expect it on central IT, cloud, and data-heavy NHS or government tenders alongside Cyber Essentials.
Last updated: 18 May 2026
Scope
Certificate scope must cover the delivering entity and relevant services. Evaluators check Statement of Applicability.
Common questions
What is Iso 27001?
ISO 27001 certifies an information security management system (ISMS), widely required for UK public sector IT and data-processing contracts.
Is this still current after February 2025?
Yes under the Procurement Act 2023.