Standard(s)s Required

ISO 9001:2015ISO 14001:2015ISO 45001:2018SSIPISO/IEC 27001:2022ISO/IEC 27001:2013 Transfer

If multiple sites, please indicate location and employee numbers

Type of management system:

Single e.g. ISO9001 onlyIntegrated e.g. One system with integrated documentsPartially Integrated e.g. management review is partially integrated

The extent to which the management system is integrated (as applicable):

Are you multisite with a central function Y/N?
(If yes, an additional supplement will be sent for further information)

YesNo

Contact Details

Consultant Name (as applicable):

Information Details

Type of application (please select from the following options)

NewRenewalScope ExtensionTransfer (please send in your latest Certificate(s) and Report(s)

Please specify the number of employees on each shift and the shift hours:

State the number of personnel working on and offsite from the organisation’s premises.

% of total work subcontracted

Do you conduct any work at customer locations? (e.g. installation, repair, maintenance, construction works)
YesNo

% of work carried out at Clients Site

Are there any activities that are outsourced or subcontracted? e.g. fabrication, transport, assembly, construction works.
YesNo

ISO27001 (Only) – Complexity Evaluation

Remote work allowed
YesNo

Which best describes your organisation’s activities?

Work in non-critical business sectors and non-regulated sectorsHave customers in critical business sectorsWork critical business sectors
(Critical business sectors are sectors that may affect critical public services that will cause risk to health, security, economy, image and government ability to function that may have a very large negative impact to the country)

Which best describes your organisation’s processes and tasks?

Standard processes with standard and repetitive tasks; lots of persons doing work under the organization's control carrying out the same tasks; few products or servicesStandard but non-repetitive processes, with high number of products or servicesComplex processes, high number of products and services, many business units included in the scope of certification (ISMS covers highly complex processes or relatively high number or unique activities)

Which best describes your IT infrastructure complexity?
Few or highly standardized IT platforms, servers, operating systems, databases, networks, etc.Several different IT platforms, servers, operating systems, databases, networksMany different IT platforms, servers, operating systems, databases, networks)

What is your dependency on outsourcing and suppliers, including cloud service?

Little or no dependency on outsourcing or suppliers.Some dependency on outsourcing or suppliers, related to some but not all important business activitiesHigh dependency on outsourcing or suppliers, large impact on important business activities

What is the extent of your Information System development?

None or a very limited in-house system/application developmentSome in-house or outsourced systems/application development for some important business purposesExtensive in-house or outsourced systems/application development for important business purposes

Is there any ISMS related information (such as ISMS records or information about design and effectiveness of controls) cannot be made available for review by the audit team because it contains confidential or sensitive information?

YesNo

Do you have business relationships (customers, suppliers) in any sanctioned countries?
https://www.gov.uk/government/collections/financial-sanctions-regime-specific-consolidated-lists-and-releases
YesNo

If yes, elaborate on how you ensure compliance with applicable sanctions laws or requirements:
Are there any Politically Exposed Persons (PEPs) in the company ownership structure?
E.g., board members or executives of international organisations, bank governors, senior government executives
YesNo

Is the company owned or controlled by a sanctions target?
Notes:
” Sanctions target” refers to individuals or entities that have economic sanctions imposed on them.
YesNo

“Owned or controlled by a sanctions target” E.g. where a sanctions target has:
(1) Greater than 50% of the company ownership.
(2) Board members.
(3) voting rights; and/or
(4) Executive post, e.g., Chairman of the board, Chief Executive Officer (CEO)
YesNo

Is the company part of a group structure?
YesNo

If yes, please provide details of headquarters:

Under The Sanctions Act, you declare that you and your company are not subject to a sanction

Under GDPR, we will retain your data for legitimate interest only, safely and securely. Please verify our Privacy Policy for additional information.