Integrated Guided runs on the Plan, Do, Check, Act cycle, delivered against a PECB Lead Implementer methodology in both standards. Goldline sets the direction and holds the standard. Your team does the build. The bar on each phase shows how the effort actually splits, and the accountable owner never moves. Phases are sequenced, not timed.
- Goldline directs, reviews and holds the standard
- Your team builds, decides and evidences
- Neither of us. Independent by requirement
SCROLL RIGHT TO FOLLOW THE PHASES →
PPHASE 01 · PLAN
One boundary, two control sets
WHAT GETS PRODUCED
- Scope and boundary covering both systems4.3 both
- Interested parties and their requirements4.2 both
- Information security policy and AI policy, approved5.2 both
- One risk methodology, security risk and AI risk6.1.2 both
- AI system inventory and risk classification42001 A.6.2
- Two Statements of Applicability, 93 controls and 386.1.3 d
GOLDLINE 70%YOU 30%
ACCOUNTABLE
Your top management. Scope, risk appetite and acceptable AI use are decisions only you can take.
DPHASE 02 · DO
Build the backbone once, the control sets twice
WHAT GETS PRODUCED
- Risk treatment plans with named owners6.1.3 both
- Asset inventory, access control, supplier and cloud27001 A.5
- Incident management and business continuity27001 A.5.24 to A.5.30
- AI impact assessment and data governance42001 6.1.4, A.7
- Explainability and human oversight records42001 A.3, A.9
- Awareness, competence and records, once for both7.2, 7.3, 7.5
GOLDLINE 25%YOU 75%
ACCOUNTABLE
Your named management system owner. This is the phase that sets the pace of the whole engagement.
CPHASE 03 · CHECK
Prove both systems work
WHAT GETS PRODUCED
- Monitoring and measurement results9.1 both
- One internal audit programme covering both systems9.2 both
- One management review, with both sets of inputs9.3 both
- Evidence packs against both Statements of Applicability
GOLDLINE 30%YOU 70%
Not Goldline. Clause 9.2 requires the internal audit to be independent of the work being audited. Goldline directed this build, so Goldline does not audit it. We hold a network of independent, credentialled auditors and will introduce one, or brief a competent person inside your own organisation to do it properly.
APHASE 04 · ACT
Close the findings and book both scopes
WHAT GETS PRODUCED
- Nonconformities logged, with root cause10.2 both
- Corrective actions closed and evidenced10.2 both
- Continual improvement record10.1 both
- Stage 1 readiness confirmed for both scopes
- Handover: one operating calendar, two certification scopes
GOLDLINE 40%YOU 60%
ACCOUNTABLE
Your named management system owner. At handover the system is yours to run, and the operating calendar tells you how.
NEITHER OF US
Stage 1 and Stage 2 belong to your certification body
The certificates are issued by accredited certification bodies, not by Goldline, and the audits are booked into their calendars. Their fees are paid to them direct, are separate from the £12,500 and carry no Goldline margin. Goldline is not a certification body and does not issue certificates, and will not sell implementation and certification to the same organisation for the same scope.
Why the split is the whole product
Integrated Guided is priced flat at £12,500 because the labour sits with you and the backbone is written once. If Goldline did the Do phase as well, that is the Integrated Sprint. The qualifying test is both Guided tests met. Without a named owner with the hours, the split above does not hold, and the honest answer is a Sprint rather than a cheaper number.
Delivered against the Plan, Do, Check, Act cycle by a PECB certified ISO/IEC 27001 Senior Lead Implementer and ISO/IEC 42001 Lead Implementer. Every deliverable is keyed to a clause of ISO/IEC 27001:2022 or ISO/IEC 42001:2023, or to an Annex A control in one of them. Effort splits are typical for a Guided engagement and are confirmed at scoping.
