Skip to content

ISO 27001 Certification in Angola

ISO/IEC 27001 is the international standard for information security. For banking, insurance, telecommunications and anyone handling international clients' data, it is often the condition for closing a contract. AGH prepares your company; DQS certifies independently.

What the standard requires

Defining the scope of the information security management system, assessing risks to the confidentiality, integrity and availability of information, and applying appropriate controls from a reference annex. It requires clear policies, access management, supplier control, incident response and continuity, with internal audit and continual improvement.

What AGH does for you

We carry out the risk analysis, support the selection of controls, produce the policies and documentation, train the team and conduct the internal audit, until the system is ready for certification.

What DQS does

DQS, an accredited and independent certification body, carries out the certification and issues the certificate, contracted and paid to DQS. AGH is DQS's exclusive Channel Partner in Angola.

How long it takes

A typical journey runs from five to nine months, depending on size, the complexity of the systems and the initial state of the controls.

How much it costs

AGH's fees for preparation, and the certification audit contracted to DQS, are set following the free diagnosis.

The version in force

The current version is ISO/IEC 27001:2022. The transition period from the 2013 version ended in October 2025, so certificates in the old version are no longer valid. Anyone certifying today does so directly to the 2022 version, with the updated set of controls.

Testing the system under pressure with CyberPlay

Having written policies is one thing; proving that the organisation carries them out in the middle of an incident is another. CyberPlay puts your team inside a simulated cyber incident, in real time and in the browser, without touching real systems, and returns a readiness index from 0 to 100.

Frequently asked questions

No. It applies to any company that handles sensitive information, its own or its clients'.

Cannot find what you are looking for?

There are more than 25,000 international ISO standards. The vast majority are technical standards; the ones a company actually certifies against number a few dozen, and these pages cover those most in demand in Angola. For all the others we rely on DQS, our partner and one of the ten largest certification bodies in the world, certifying more than 35,000 organisations in over 130 countries against dozens of international standards, schemes and accreditations. If the certification, scheme or accreditation you need is not here, talk to us: we will help you find it and activate it.

Talk to us

How we get to the certificate

We follow the AGH Method · International Conformity: five phases, from diagnostic to continual improvement, with preparation by AGH and the Export Lab network and certification carried out independently by DQS.

See our methodology

Start with the free diagnostic.

Within 48 working hours we return a reading of your company's starting point and a concrete plan to move towards certification.