SHIELDPATH SECURITY
ISO 27001 and ISO 42001. From first steps to certification readiness.
Strengthen information security and put responsible AI governance into practice. ShieldPath helps UK organisations implement management systems tailored to their business, with practical advice, clear documentation and support from an experienced Lead Auditor.
SERVICES
What we do
ISO 27001 Gap Assessment
Find out exactly where you stand against ISO 27001:2022 and get a prioritised plan to certification.
ISO 42001 AI Gap Assessment
See how ready you are to govern AI responsibly, measured against the international AI management standard.
ISO 27001 Implementation
We build your information security management system with you and take you through to certification.
ISO 42001 Implementation
An AI management system that fits how you actually develop, buy and use AI.
Penetration Testing
Independent testing of your networks and applications, delivered with our CREST-accredited partner Closed Door Security and scoped by us.
HOW WE WORK
Three steps to certification
01
Assess
A gap assessment shows where you are today and what certification will take.
02
Build
We implement the policies, risk management and controls, sized to your organisation rather than copied from a template.
03
Certify and sustain
We prepare you for the certification audit and can stay on as your virtual CISO afterwards.

WHO YOU WORK WITH
Jason Williams, Founder and Principal Consultant
More than 20 years delivering information security, risk and compliance programmes in regulated and business-critical environments. As an ISO 27001 Lead Auditor and Lead Implementer and an ISO 42001 Lead Auditor, Jason sees certification from both sides of the table.
TOOLS
Built to keep you audit-ready
ReguEase
Our compliance platform for ISO 27001 and ISO 42001: risk registers, Statements of Applicability, internal audits and audit readiness in one place. Included for our implementation clients.
Online Gap Assessment
A quick first view of where you stand against ISO 27001 and ISO 42001, before booking a full assessment.
Not sure where to start?
A 30-minute call is enough to tell you what certification would involve for your organisation.
