Ten products to prepare, internally audit and demonstrate the trustworthiness of your management system. Scope, timeline and deliverables are defined from the proposal.
We identify the security gaps that hold back your sales the most and prioritize actions to reduce risk.
🎯
What do we solve?A corporate client asks for security evidence and the company doesn't know where it stands or where to start.
⏱ 3 days👥 Companies that sell to large corporations
What you receive
Maturity score by Annex A domain
The 10 gaps that most hold back sales or audits
90-day roadmap with owners
Executive results meeting
Natural next step
Includes a semi-annual re-assessment and leads to Trust Dossier or Quarterly Pulse.
27001900122301
Entry
Flash Check
Express internal audit
A fixed-scope audit: clear findings and an action plan to meet your annual requirement.
🎯
What do we solve?A certified company must audit itself every year and leaves it to the last minute, or it is done by someone who isn't independent.
⏱ 2 days👥 Certified companies
What you receive
Fixed plan and scope: 1 standard, critical processes
2 days of audit, remote or on-site
Report with classified findings and evidence
Suggested action plan
Natural next step
Repeats every year and leads to Quarterly Pulse and Annual Cycle.
22301
Entry
Crisis Tabletop
Executive crisis management exercise
Test your crisis committee in a 4-hour session and walk away with the 5 most urgent improvements.
🎯
What do we solve?Leadership has a written plan it has never tested; in a real crisis nobody knows who decides what.
⏱ 2 days👥 Management teams with an untested plan
What you receive
Tailored scenario: ransomware, supplier outage, inaccessible site
4-hour session with the crisis committee
Report on gaps and slow decisions
Improvement plan with 5 prioritized actions
Natural next step
Annual exercise with a new scenario; leads to Safe Monday.
27001900122301
Core
Dress Rehearsal
External audit simulation
We simulate your audit so nonconformities show up here and not on audit day.
🎯
What do we solve?A major nonconformity in the external audit can cost you the certificate or a contract.
⏱ 4 days👥 Companies with an upcoming audit
What you receive
Simulated audit using the certification body's criteria
Findings report with severity levels
Preparation session for the audited team
Closure verification at 30 days
Natural next step
Repeats every year before the surveillance audit and leads to the Annual Cycle.
27001900122301
Core
Focused Audit
Audit by risk or critical topic
Audit only where the risk is: access, suppliers, backups or critical processes.
🎯
What do we solve?Full audits are long and expensive, and the real risk sits in 2 or 3 areas: access, suppliers, backups or critical processes.
⏱ 3 days👥 Certified companies
What you receive
Topic selection based on risk and previous findings
3-day audit of the controls and processes for the topic
Report with evidence and priorities
Corrective recommendations
Natural next step
Topics rotate every year, with 2 to 4 audits per program.
27001
Core
Trust Dossier
Security evidence for demanding clients
Brings together the policies, controls and answers your clients ask for, so you can respond to questionnaires in days, not weeks.
🎯
What do we solve?A large or regulated client requires a security assessment of its suppliers, and each questionnaire takes weeks.
⏱ 4 days👥 Suppliers to large or regulated companies
What you receive
Minimum policies and controls
Risk matrix and simplified Statement of Applicability (SoA)
Library of questionnaire answers
Evidence folder ready to share
Natural next step
Monthly maintenance: updates and answers to new questionnaires.
22301
Core
Safe Monday
BIA and minimum viable continuity plan
Know what is critical, how long it can be down and how to resume operations with a plan that gets tested.
🎯
What do we solve?If the system, the site or a critical supplier fails, operations stop and nobody knows what to recover first.
⏱ 4 days👥 Critical operations
What you receive
Business impact analysis (BIA) with RTO and RPO
Continuity strategies per critical process
Minimum viable plan and crisis tree
One test exercise
Natural next step
Annual continuity program, with quarterly follow-up.
27001900122301
Recurring
Quarterly Pulse
Compliance and action follow-up
Every quarter we review indicators, risks and actions so you reach the audit without surprises.
🎯
What do we solve?Between audits, findings go cold, actions expire and the surprise arrives on external audit day.
⏱ Every quarter👥 Certified companies
What you receive
Review of indicators, risks and evidence
Follow-up and closure of corrective actions
Traffic-light view of system compliance
60-minute meeting with the system owner
Natural next step
It is the recurring service itself; scales up to Annual Cycle.
27001900122301
Advanced
Annual Cycle
Annual assurance program
One contract for the whole year: internal audit, follow-up, management review and dashboard.
🎯
What do we solve?Certified companies handle audit, follow-up and management review as separate tasks, almost always against the clock.
⏱ 12 months👥 Companies with one or more standards
What you receive
Annual audit program
1 full internal audit
3 Quarterly Pulses
Management review ready and annual effectiveness report
Natural next step
Annual renewal; keeps the client covered for audit, follow-up and management review under a single contract.
2700122301
Advanced
Digital Resilience
Technology security and continuity
Prepare your company for a ransomware attack or a critical outage: priorities, response, recovery and a real test.
🎯
What do we solve?A ransomware attack or a platform outage stops operations and nobody knows who decides, what gets recovered first or whether backups work.
⏱ 5 days👥 Critical digital operations
What you receive
BIA and digital dependency map
Incident response and recovery plan
Backup restoration test
Executive drill
Natural next step
Semi-annual test and continuity program.
Not sure which one to choose?
Tell us your situation in 2 minutes and we'll recommend where to start.
Take the portfolio with you
PDF brochure with the 10 products, timelines and who each one is for.
Supplier to large companiesTrust Radar → Trust Dossier
Critical operationCrisis Tabletop → Safe Monday → Digital Resilience
Frequently asked questions
No. Certification is granted by an accredited body of your choice. FORQUANTIQ prepares you, audits internally and simulates audits so your company arrives better prepared.
Each proposal defines scope, timeline, deliverables and fee before work begins. Any scope extension is agreed in writing before it is carried out.
Yes. Each product is sold separately; the suggested next steps are optional.
No. The consulting products are independent. Continuous monitoring of your website is an optional add-on.
Under a confidentiality agreement before we start, in accordance with Colombian Law 1581 of 2012 and our personal data processing policy.
Depending on the product: for example, the Flash Check can be done remotely or on-site. It is defined in the proposal.
Once the proposal is approved, we agree on the start date and who your point of contact will be.
This is specified in each final proposal.
Request your proposal
Tell us your situation and we'll propose a starting point. We reply within 24 business hours.
ISO consulting and assuranceScope defined in the proposal
