The Only real element you cannot do on your own may be the certification audit, which must be accomplished by an exterior accredited physique. In-home interior audit: Should you have experienced internal auditors on staff members, the cost is generally personnel time. The internal audit for a little ISMS scope https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits