The One section You can not do oneself could be the certification audit, which have to be completed by an external accredited body. ISO 27001 certification is valid for 3 years. Preserving ISO 27001 certification involves yearly surveillance audits in decades 1 and two, then a complete recertification audit in https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits