ISO 27001:2022
ISO 27001 in Lausanne: certificate without an on-site audit
Companies in Lausanne can obtain an ISO 27001:2022 certificate entirely online. You answer 48 yes/no questions, and the certificate follows within 4 hours after passing and payment. Zertify has no office in Lausanne and does not need one, because no one travels and no one visits your premises.
01: Demand
Which companies in Lausanne ask for ISO 27001?
ISO 27001 is about information security, so demand follows the data, not the postcode. Lausanne has software and IT companies, healthcare providers, financial and fiduciary firms, online shops and service businesses. Anyone who handles data on behalf of other companies will meet the standard sooner or later.
- IT service providers and software companies
- Customers add a question on ISO 27001 to the supplier questionnaire before they sign.
- Cloud service providers
- Buyers of hosting and SaaS want evidence of how data and access rights are managed.
- Financial service providers
- Banks, insurers and their suppliers review the information security of every partner they depend on.
- Healthcare
- Patient data is among the most sensitive data a company can hold.
- E-commerce and online services
- Larger retail and platform partners check how customer and payment data is protected.
02: Standard
What does ISO 27001:2022 require from your company?
The standard describes how an information security management system (ISMS) is built. Its core is the risk assessment: it decides which Annex A controls you implement and why. The 2022 edition revised these controls and covers cloud services, data protection and cyber risks, among others.
Assess information security risks
You identify what could go wrong with your data and systems, and rate each risk.
Define a security policy and objectives
Management writes down what the company wants to protect and how it will measure progress.
Implement security controls from Annex A
You choose the controls that answer your risks, such as access management, backups or supplier checks.
Prepare a Statement of Applicability
The SoA lists every control, whether you apply it and the reason.
Raise awareness and train employees
Staff need to know the rules and what to do when something looks wrong.
Manage security incidents and learn from them
Incidents are recorded, handled and used to improve the controls.
03: Comparison
On-site audit or online route: what changes for a company in Lausanne?
The classic route means a certification body sends auditors to your premises, usually in several stages. The online route replaces the visit with a structured self-assessment. Both lead to a certificate, but they differ in effort, timing and what the certificate rests on.
| Aspect | Classic route with on-site audit | Zertify online route |
|---|---|---|
| Assessment | Audit by a certification body at your premises | Online self-assessment with 48 yes/no questions |
| Travel and visits | Auditors on site, staff interviews, appointments to coordinate | None, everything runs in the browser |
| Time to certificate | Indicative range: several weeks to a few months | Within 4 hours after passing and payment |
| Cost | Quote from the certification body, depends on company size and audit days | CHF 849 in the first year, then CHF 569 per year |
| Yearly follow-up | Surveillance audits, usually on site | Short online re-audit, included in the yearly fee |
Which route fits depends on who asks for the certificate and what they accept.
04: Zertify
How Zertify certifies a company in Lausanne
The certificate is issued by G6 Agency AG under licence from SICE, the Swiss Institute of Certification and Education. SICE reviews every assessment before the certificate is issued. The price is CHF 849 (€849) in the first year, then CHF 569 (€569) per year including the yearly online re-audit. The certificate is valid for 3 years.
Prices include 8.1% Swiss VAT for customers in Switzerland and Liechtenstein. If you certify a second standard, you get 20% off, and 30% off for three or more, also on the yearly fee. You do not need an account to buy.
05: Steps
The steps from self-assessment to certificate
Prepare your ISMS documents first: risk assessment, policy, Statement of Applicability. The questions refer to them, and answering is faster when they are at hand.
Answer the 48 questions
Thirteen are mandatory requirements of the standard and must all be answered yes. Of the other 35, at least 24 need a yes.
Pay for the first year
Once you have passed, you pay by the yearly subscription. No account is needed.
Receive the certificate
The PDF arrives within 4 hours after passing and payment.
Share it with your customers
Every certificate carries a number and a QR code that lead to a public verification page.
Confirm it every year
A short online re-audit keeps the certificate current. You can cancel in your customer account at any time, effective at the end of the current year.
06: In practice
Using the certificate with customers and tenders
A purchasing department in Lausanne, Geneva or Zurich can open the verification page, enter your certificate number or scan the QR code on the PDF, and see that the certificate is genuine. That answers the line in the supplier questionnaire without a call or an attachment of doubtful origin.
Check the wording of each tender before you rely on any certificate. Some customers name an on-site audit by a certification body as a condition. Others only ask for an ISO 27001 certificate that can be verified. Reading the requirement first saves you a rejected offer.
07: FAQ
Questions about ISO 27001 in Lausanne
08: Guide
Related pages
Check where your company stands on ISO 27001
The self-assessment shows within minutes whether your ISMS meets the 13 mandatory requirements.
Free and without registration.