ISO 27001
ISO 27001 compliance roadmap.
Goalite’s ISO 27001 information security management programme is underway. We are transparent about where we are in this process — because honesty matters more to enterprise procurement than premature certification claims.
Current status
Our current status.
Goalite is actively building its ISO 27001-aligned information security management system (ISMS). We are targeting certification in 2026. The programme includes:
- Information security policy documentation
- Risk assessment and treatment programme
- Security controls framework (aligned to Annex A)
- Incident response procedures
- Business continuity planning
- Internal audit programme
- Management review process
- Supplier and sub-processor assessment
- Annual penetration testing (planned)
- Cyber Essentials certification (planned alongside ISO 27001)
Available now
What enterprise procurement teams can access now.
Request any of the above: hi@goalite.com with [SECURITY] in the subject line.
Why it matters
Why ISO 27001 matters.
ISO 27001 is the international standard for information security management systems. It provides a systematic framework for managing sensitive company and customer information, ensuring confidentiality, integrity, and availability. For enterprise customers, ISO 27001 certification from a vendor signals that security controls are independently verified, not self-assessed.
Many enterprise procurement processes require ISO 27001 certification or evidence of active progress towards it. The standard covers risk management, access control, incident handling, business continuity, supplier management, and ongoing monitoring. Goalite’s ISMS programme is designed to meet these requirements comprehensively, not as a checkbox exercise.
Roadmap
Our timeline.
Q2 2026
ISMS framework established, policies documented
In progressQ3 2026
Internal audit complete, Azure Marketplace listing
Q4 2026
External audit initiated
2027
Certification target
FAQ