ISO 27001 · Coaching for UK small businesses
ISO 27001 ready,
in 90 days.
I’m Alan Parker. For ten years, I’ve coached UK small businesses through ISO 27001 — without the big-consultancy fees. You own your ISMS. I keep you on track.
30 Years in IT Governance
ITIL Expert · PRINCE2 · CISMP
SMEs only — no enterprise spin
Trusted by UK & International SMEs
Three ways to work with me
Pick the path that fits where you are right now.
Whether you need full-on coaching, a self-paced course, or just the templates — you’ll always own your ISMS. No black boxes, no lock-in.
the 90-day plan
A simple route from “where do I start?” to certified.
Four phases, twelve weeks. No mystery, no padded retainers. You can see the whole thing from day one — and step off if it isn’t working.
Week 1
Scope & Governance
I introduce you to the standard and help you determine the ‘context of your organisation’ and how your governance structure will work
Weeks 2 – 6
Risk Management & SoA
We explore what approach you need to assess and process risks. Then we explore the 93 controls of Annex A and build your Statement of Applicability (SoA)
Weeks 7 – 9
Performance & Improvement
I’ll show you how to build performance tracking and a cycle of continual improvement into your ISMS.
Weeks 10 – 12
Internal Audit & Checks
We ensure you are certification-ready through an internal audit that I will conduct for you.
If 90-day coaching isn’t right for you, I’ll say so.
Meet your coach
I’m Alan Parker.
One person, one focus: ISO 27001 for SMEs.
I’m not a big consultancy. I’m an individual offering coaching and support to small businesses — usually 1 to 250 people — who’ve been asked for ISO 27001 by a big enterprise customer and have no idea where to begin.
Most small businesses just keep kicking it down the road. I’ve spent thirty years in IT governance figuring out how to get them through it without upending the business — and without charging the earth.
• ITIL Expert
• Prince2 Practitioner
• CISMP
• B.Sc (Hons) Information Systems
• 30+ years in IT governance
the 90-day plan
“We sailed through the assessment”
Real SME businesses. Real ISO 27001 certifications. No “synergies” or “world-class solutions” — just companies that got it done.
Ready to stop kicking it down the road?
Book a free 30-minute call. I’ll tell you honestly whether 90-day coaching makes sense for your business — or point you to a cheaper path that does.