If Your setting is previously fairly mature, This is often minimal. Should you be starting from scratch, remediation can rival the ISO 27001 certification cost on its own. Treat the certificate as proof that very good security exists, not as an alternative for setting up it. Attaining ISO 27001 certification waiting for link from Web 2.0 Profiles (2)