ISO 27001 certificate, fully online
ISO 27001 in Sion: certified without an auditor on site
Companies in Sion can get their ISO 27001:2022 certificate entirely online. You answer 48 yes/no questions about your information security management, and nobody has to visit your premises. Zertify has no office in Sion and does not need one.
01: Who needs it
Which businesses in Sion need ISO 27001?
Sion is the capital of the canton of Valais. The demand for ISO 27001 does not depend on the town, though. It depends on who your customers are and what data you handle for them.
The standard is most often requested from the following kinds of business, in Valais as elsewhere in Switzerland.
- IT service providers and software companies
- Customers want to know how you protect the systems and data you work on.
- Cloud service providers
- Hosting and SaaS buyers ask for an information security certificate before signing.
- Financial service providers and banks
- Outsourcing partners are expected to show a working security management system.
- Healthcare
- Patient and health data call for documented controls and incident handling.
- E-commerce and online services
- Payment and customer data make security a question in every large order or partnership.
- Companies handling sensitive customer data
- Any business that stores such data for others will meet the same question.
The usual trigger is a supplier questionnaire from a customer's purchasing department, or a tender that asks for proof of an information security management system.
02: Process
How does ISO 27001 certification work for a company in Sion?
The process is identical for every company, because it runs in the browser. There is no travel, no appointment for an audit day and no local contact person. You need no account to buy.
Start the self-assessment
It is free and needs no registration. You answer 48 yes/no questions for ISO 27001:2022.
Pass it
Thirteen questions are mandatory requirements of the standard and must all be answered yes. Of the other 35 questions, at least 24 need a yes.
Pay and receive the certificate
After you have passed and paid, the certificate arrives within 4 hours. SICE reviews every assessment before it is issued.
Show it
The PDF carries a QR code and a certificate number. Anyone can check both on the public verification page.
Confirm it every year
A short online re-audit keeps the certificate current. It is part of the yearly fee.
03: Comparison
On-site audit or online route: what changes for a company in Sion?
The classic route means a certification body sends auditors to your premises. The online route replaces the audit day with a structured self-assessment. The table shows where the two differ in practice.
| Aspect | Classic route with on-site audit | Zertify online route |
|---|---|---|
| Audit format | Auditors visit your premises and interview staff | Online self-assessment, reviewed by SICE |
| Scheduling | Audit dates are agreed with the certification body | No appointment, you start when you are ready |
| Time to certificate | Indicatively several weeks to months from first contact | Within 4 hours after passing and payment |
| Cost | Quoted individually, depends on company size and audit days | Fixed price, shown before you start |
| Proof for customers | Certificate document from the certification body | PDF with QR code and public verification by number |
| Follow-up | Surveillance audits on site | Short online re-audit every year |
Which route suits you depends on what your customer asks for. Read the wording of the tender or the supplier questionnaire first. Some buyers name a route, others only ask for a certificate.
04: Content
What does the ISO 27001 self-assessment cover?
ISO 27001:2022 describes how an information security management system (ISMS) is built. The risk assessment sits at its core, because it decides which Annex A controls you implement and why. The 2022 edition revised these controls and covers cloud services, data protection and cyber risks, among others.
The questions follow the main requirements of the standard.
- Risk assessment
- You identify and assess information security risks. This belongs to Planning, clause 6.
- Policy and objectives
- Management defines a security policy and measurable objectives. This belongs to Leadership, clause 5.
- Annex A controls
- You implement the controls that your risk assessment calls for.
- Statement of Applicability
- You document which controls apply, which do not, and the reason in each case.
- Awareness and training
- Employees know the rules and their own part in them. This belongs to Support, clause 7.
- Security incidents
- You manage incidents and learn from them.
If you cannot yet answer yes to the mandatory questions, you will see which requirement is missing before you pay anything.
05: Zertify
Where Zertify fits in and what it costs
The Zertify certificate is based on an online self-assessment, without an on-site audit. It is issued by G6 Agency AG under licence from SICE, the Swiss Institute of Certification and Education. SICE reviews every assessment before the certificate goes out.
The price is CHF 849 (€849) in the first year, then CHF 569 (€569) per year including the yearly online re-audit. The certificate is valid for 3 years. For customers in Switzerland and Liechtenstein, the prices include 8.1% Swiss VAT.
The yearly fee is an automatic subscription. You can cancel at any time in your customer account, effective at the end of the current year. If you cancel, the certificate ends with the year you have paid. If you add a second standard, such as ISO 9001, you get 20% off, and 30% off from three standards. The discount also applies to the yearly fee.
06: Using it
How do you show the certificate to customers and in tenders?
Attach the PDF to your offer or to the supplier questionnaire. The QR code leads to the verification page, where the certificate is listed by its number. A purchasing department or a customer auditor can check it without writing to you.
Describe the route accurately when asked. The certificate rests on an online assessment that SICE reviews, and it is confirmed each year by a short online re-audit. Buyers who require an on-site audit will say so in their requirements, and you will know early rather than late.
07: FAQ
Questions about ISO 27001 in Sion
08: Guide
Related pages
Check where your company stands on ISO 27001
Answer the 48 questions online and see whether you pass.
Free and without registration.