---
title: "ISO 27001 certified managed IT provider in Perth | CCP"
description: "CCP holds ISO/IEC 27001:2022, certified by BSI under certificate IS 840964. What it covers, how to verify it, and how to use it in supplier due diligence."
url: "https://ccp.com.au/iso-27001-certified/"
---

# ISO 27001 certified managed IT provider in Perth

## Certified by BSI. Check the register yourself.

Computer Consultant Professionals Pty Ltd holds ISO/IEC 27001:2022, certificate IS 840964. BSI audits our information security management system every year.

Certificate

Standard

ISO/IEC 27001:2022

Certificate

[IS 840964](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/) Opens BSI’s client directory

Certified by

BSI

Certified entity

Computer Consultant Professionals Pty Ltd

Registered

11 May 2026

Expires

10 May 2029 Subject to yearly BSI surveillance audits

 [![ISO/IEC 27001:2022 certified by BSI, certificate](https://ccp.com.au/certifications/bsi-iso-27001-black-96.webp) IS 840964](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/)

## ISO 27001 certificate scope

### What BSI audits.

> “The Information Security Management System (ISMS) is applicable to CCP's environment and encompasses people, processes, and technology hosted in a cloud environment, covering data storage, backup, recovery, cybersecurity monitoring and incident response management. This scope is defined in accordance with the Statement of Applicability, Version 1.0 dated 30/04/2026.”

Scope statement, certificate IS 840964. Statement of Applicability version 1.0, dated 30 April 2026.

## What our ISO 27001 certification covers

### Our systems, not yours.

The certificate is evidence about us as your supplier. It doesn’t certify your business.

-   #### Covered by our certificate

    -   How we store, back up and recover data
    -   Our cyber security monitoring and incident response
    -   The people, processes and cloud-hosted technology behind them
    -   Our policies, risk register, internal audits and management reviews
-   #### Not covered

    -    Your own systems, controls or compliance
    -    ISO 27001 certification for your business
    -    A replacement for your own security controls

## How we keep ISO 27001 certification

### Checked every year, not once.

-   Every year

    #### BSI surveillance audit

    BSI audits the system again each year the certificate is current.

-   Quarterly

    #### Steering committee

    Reviews gaps in the system and decides what to improve next.

-   Scheduled

    #### Risk reviews

    Each asset in the register has its own review date, door keys included.

-   Monthly

    #### Training reporting

    Cyber awareness training completion, checked every month.

-   Every year

    #### Policy review

    Staff confirm they understand our policies at the end of each year.

## Using our certificate in supplier due diligence

### What to put in your vendor file.

1.  [01#### Check the certificate

    Look up IS 840964 in BSI’s client directory. It shows the standard, scope and dates. ](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/)
2.  02

    #### Quote the scope word for word

    Your assessor compares it with BSI’s record. A paraphrase reads as a discrepancy.

3.  [03#### Ask for our Statement of Applicability

    It lists the ISO 27001 controls we apply. Clients running supplier due diligence can request it. ](mailto:hello@ccp.com.au?subject=Statement%20of%20Applicability%20request)

Twelve months from decision to certificate.

The grant, the consultants, both audit stages and what we’d tell another business.

[Read how we got there](https://ccp.com.au/news/iso-27001-in-twelve-months/)

## ISO 27001 certification questions

### What assessors ask us.

### Is CCP ISO 27001 certified?

Yes. Computer Consultant Professionals Pty Ltd holds ISO/IEC 27001:2022, certificate IS 840964, issued by BSI and registered on 11 May 2026. [Check it in BSI’s client directory](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/).

### Does your certificate make our business ISO 27001 compliant?

No. It covers our information security management system. Your business, systems and controls are outside its scope. It does show that a supplier in your chain has been independently audited, which you can cite in your own risk assessment.

### How long is the certificate valid?

Until 10 May 2029, subject to BSI’s yearly surveillance audits. BSI’s directory always shows its current status.

### Can we see your Statement of Applicability?

Yes, for supplier due diligence. It isn’t published. [Email hello@ccp.com.au](mailto:hello@ccp.com.au?subject=Statement%20of%20Applicability%20request) and we’ll send it to the person running your assessment.

### Can you help our business get ISO 27001 certified?

Yes. We prepare businesses for it, and we’ve been through the cycle ourselves. The certificate has to come from an accredited certification body such as BSI. [See our compliance services](https://ccp.com.au/services/compliance/).