Toolkit choice

1. What package should we buy, if only one of our customers is asking us to be certified in ISO 27000, because they have access to an IBM SaaS that we sell them

Answer: Considering your stated context, the proper toolkit would be the ISO 27001 Documentation Toolkit, which you can see a demo of its templates at this link: https://advisera.com/27001academy/iso-27001-documentation-toolkit/

Many of our clients for that toolkit are SaaS companies.

2. Once purchased, on how much time according to your experience, we can obtain certification for this purpose

The duration of implementation project varies according many variables (e.g., available resources, experience with standard's requirements, top management involvement, etc.), but for small and medium-size organizations the implementation generally varies from 3 to 12 months.

To get an insight about the time duration for you organization, please access our ISO 27001/ISO 22301 Implementation Duration Calculator at this link: https://advisera.com/27001academy/free-tools/free-calculator-duration-of-iso-27001-iso-22301-implementation/

This article will provide you further explanation about implementation process:

• ISO 27001 implementation checklist https://advisera.com/27001academy/knowledgebase/iso-27001-implementation-checklist/