ISO Buyer’s Cheat Sheet – 10 Questions to Ask Any Consultant

Before You Buy ISO Services—Ask These 10 Questions.

Questions:

1. Will you define my ISMS scope and write policies?

2. Will you run live risk workshops—not just give templates?

3. How do you align our controls to GDPR/AI Act/DORA?

4. Can you prepare us for board presentations?

5. Do you run internal audits and gap analysis?

6. How do you align our ISMS to sales enablement?

7. Will you support us during the audit?

8. Do you provide a certification roadmap?

9. Will you sign an NDA?

10. Do you provide a guarantee or SLA?.