What should ISO 27001 certification cost?

Pick your headcount and a day rate. For 50 people, the first 3 years cost about €17,188-39,004.

First 3 years: €29,405See the estimate

Contractors in scope count too.

Currency
Day rate

Pick 1.

A public framework contract in Spain (7-hour day)
The TÜV Saar public price list in Germany
A quote from a large UK accredited body
The rate in your quote.

A fair quote for 50 people

First 3 years, audits and fees

€29,405

At €1,590 per day, with no travel. All public rates give €17,188-39,004.

Stage 1 + Stage 2
about 10 days
Lowest a body can justify
7 days
Surveillance, years 2 and 3, each
about 3.5 days
Recertification, end of year 3
about 7 days

Get the fair-quote sheet as a PDF

  • Audit days for each audit.
  • The 3-year cost at 3 public day rates.
  • The lines a complete quote must show.

The estimate, line by line

Audit days of a fair quote

Audit days for 50 people: starting point about 10 days, floor 7 daysfloor 70246810121416audit days, Stage 1 + Stage 2
  • Below 7 days: more than the allowed reductions
  • 7-10 days: reduced, needs recorded reasons
  • 10 days: starting point for 50 people

3-year cost at public day rates

Cost of each audit at a low, typical and high public day rate
LineLowTypicalHigh
Day rate€925€1,590€2,101
Year 1: Stage 1 + 210 days€9,250€15,900€21,010
Year 2: surveillance3.5 days€3,238€5,565€7,354
Year 3: surveillance3.5 days€3,238€5,565€7,354
Feesapplication, certificate, admin€1,463€2,375€3,287
Total, 3 years€17,188€29,405€39,004
Then: recertification€6,475€11,130€14,707

What else moves the price