PRISM Guided & Certified
Consultants who have been down this road dozens of times.
Our team has led dozens of certifications — 100% success rate across all implementations · as of 09/2026. That knowledge from these projects is built into PRISM; if you want more than software, it sits at the table: at a fixed price instead of daily rates.
Focus areas
Where our expertise runs deepest.
ISO 27001 · NIS 2 · BSI C5
The core of our consulting practice. We have led dozens of certification projects — from 20-person startups to mid-sized companies with complex IT landscapes. Particular focus: healthcare software (§393 SGB V) and regulated cloud services.
KRITIS · §8a BSIG · B3S
References in the healthcare sector: we know the 2-year evidence cycle inside and out. Sector-specific security standards (B3S) in the healthcare sector from active projects.
Multi-Framework
Organisations that need multiple standards (ISO 27001 + C5, NIS 2 + GDPR, TISAX + ISO 9001) benefit from our multi-framework experience: structure controls once, evidence multiple times — no duplication of effort.
How the engagement works
Scoping
Scope, standard choice, realistic timeline — we jointly define what will be certified.
Build with PRISM
Your consultants work directly in your PRISM environment: SoA, policies, controls — everything traceable in the platform.
Reviews & audit preparation
We review your evidence as an auditor would — including internal audit and management review.
Certification & operations
Support through the audit, then transition to operations mode with surveillance audits.
Packages
Guided or Certified — which suits you?
Guided
Teams with in-house IT know-how who want to add standards expertise
- PRISM ISO Platform
- Consultants with dozens of projects
- Support from scoping to audit handover
- Fixed price instead of daily rate
Certified
Those who want certificate and auditor from a single source
- PRISM ISO Platform
- Consultant + accredited auditor
- Fixed audit date from project start
- All-inclusive price — nothing left open
The difference from tool-only providers
With pure automation tools you end up chatting with a bot. With us, a person with audit experience reviews your evidence — and if you want the complete package, the auditor is already booked in.
Let's talk about your path to certification.
In the initial call we clarify standard, scope and how much support you really need.