Costs: questions and answers.
What ISO certification and compliance cost, what Basenorm costs and what non-compliance can cost.
What does ISO 27001 certification cost?
The cost consists of internal time, optional external support, tooling and the certification body’s fees for the initial audit, surveillance audits and recertification. Amounts depend heavily on scope and size, so ask more than one accredited certification body for a quote.
What does Basenorm cost?
The Foundation layer starts at €250 per month for one primary framework. The Assurance and Regulatory layers are priced on request, depending on your frameworks, users and entities.
What can non-compliance cost?
Fines depend on the regulation. Under the GDPR they can reach €20 million or 4% of worldwide annual turnover; under NIS2, maximums of at least €10 million or 2% for essential entities and at least €7 million or 1.4% for important entities; under the AI Act, up to €35 million or 7% for prohibited practices. Lost customers and delayed deals often cost more.
Where does working on one control library save time?
In shared controls and evidence that you maintain once instead of per framework, and in adding a new framework that starts from what is already there. How much it saves depends on your frameworks and scope.
How do we estimate the return?
Estimate the hours spent per framework on maintaining controls, collecting evidence and preparing audits, and how much of that is duplicated across frameworks. The calculator on the pricing page gives an indication, not a promise.
Book a demo
Your question not answered?
In a demo we answer your questions in the context of your own frameworks and scope.
- Where you stand with ISO 27001 and ISO 42001.
- Which frameworks apply to you.
- How Basenorm keeps your management system current.
Hosted in the Netherlands. Your data stays in the EU.