- Information security experience
- 7+ years
- Certifications implemented
ISO 27001 in weeks, without taking time away from your team.
We do almost all the work and stay with you until you're certified in ISO 27001 or ENS, so security never holds up a deal again.
I want my plan
20-min call · You get your roadmap, even if you don't work with us
- Certified ISO 27001 implementer and auditor
- No new software or licences
- If you don't certify first time, we keep going for free
- ENS for selling to the Spanish public sector
If you start on Monday 12 oct
Certified on 27 nov
S1S2S3S4S5S6S7
Diagnosis and date
Plan to show your customer
Implementation: we do it
Audit and certificate
- CTO time
- ~4 hours on the ISMS
- If you don't certify
- We keep going for free
The problem
Without ISO 27001, many contracts don't get signed.
More and more large companies require it before working with a software vendor. And without it, security questionnaires drag on: every answer needs justifying, and the deal is left waiting.
Procurement · Enterprise customerTo: you · 09:14
Contract on hold
Supplier onboarding: missing documents
Hi,
To continue with onboarding we need your current ISO 27001 certificate. I'm also attaching our security questionnaire.
As soon as we have everything, we'll move ahead with the contract.
security_questionnaire.xlsx200+ questions
- Do you hold a current ISO 27001 certificate?Pending
- Do you have an up-to-date risk assessment?Pending
- Do you train staff on security every year?Pending
How it works
Your ISO 27001 in weeks, not months
-
Week 1
Initial assessment
What is already in place, what is missing and your certification date.
-
Week 2
Dated plan
A document to show your customer in the meantime.
-
Weeks 2 to 6
Implementation
Policies, procedures, risk assessment and technical changes alongside the CTO.
-
Week 7
Audit and certificate
The certification body runs the audit and we support you throughout.
Your options
There are 4 ways to get ISO 27001.
| Do it yourselves | Compliance software | Hourly consultancy | Briblo | |
|---|---|---|---|---|
| Who does the work? | Your team | Your team | Your team, guided | We do |
| Your team's hours | Hundreds | Lots | Lots | Few |
| Price | Your team's time | Yearly licence | By the hour | Fixed, no software costs |
| If you fail the audit | Start over | Up to you | More hours | We keep going for free |
What's included
We do the work
The CTO spends about 4 hours on the ISMS implementation. We take care of the rest.
Briblo does
Almost everything
Documents, risks, training and audits.
- Full documentationPolicies, procedures and records.
- Risk assessmentDone and documented by us.
- Team trainingFor all your staff.
- Internal auditBefore the certification body arrives.
- Choosing the certification bodyAccredited and independent.
- Audit coordinationWe support you throughout.
Your team does
~4 h
During the ISMS implementation, mostly the CTO.
- Technical changesGuided by us.
- Document reviewYou sign off what we write.
- Check-insA 30-minute call every two weeks.
Book a call
We also implement ENS (Esquema Nacional de Seguridad), Spain's National Security Framework, for companies that sell to the Spanish public sector. We do the work and stay with you until you're certified.
Certified implementer and auditor
We are engineers who know how a SaaS startup works.
We've been CTOs, we've been through ISO 27001 from the inside and we've answered security questionnaires for IBEX 35 companies. We are certified by PECB, an accredited international body that certifies ISO professionals.
- Information security experience
- 4 years
- Certifications achieved
Frequently asked questions
If you have another question, we'll answer it on the call.
How much does it cost?
It depends on the size of the company and what's already in place. We give you a fixed price on the first call.
How much time does my team need?
About 4 hours during the ISMS implementation, mostly the CTO. That figure doesn't include the other phases, such as the certification body's audits.
What if we don't pass the audit?
We keep working with you at no cost until you pass.
Why is the audit separate?
Whoever implements the system can't certify it. That way your certificate is valid for any customer. We find the certification body and coordinate the audit.
Do we need to buy any software?
No. We implement the system without tying you to any software: we work with the tools you already use. No new licences and no extra platform to maintain.
We use AI in our product. Does that matter?
Yes, and we cover it: more and more questionnaires ask about AI. We also do ISO 42001.
Do you handle ENS (Spain's National Security Framework)?
Yes, for companies that sell to the Spanish public sector. ENS is regulated by Royal Decree 311/2022 and is mandatory for public-sector suppliers; certification is issued by ENAC-accredited bodies.
We have a security questionnaire to fill in. Can you help?
Yes, we'll go through it on the first call.
Book 20 minutes. Leave with your plan.
We review what you have in place and what you need. You get:
- What's missing for you to get certified
- How long it will take and how many hours your team will need
- A fixed price, no surprises
Free, and it's yours even if you don't work with us.
You'll talk to Jordi or Eduard.
If the calendar doesn't load, open it in a new tab.