ATLAS HOLDING ISO 27001 and ISO 9001 implementation, NIS2 compliance and IT security for small and mid-sized companies. No unnecessary bureaucracy — only documents and controls that actually work.
Information security
Quality management
Environment
Health and safety
Directive (EU) 2022/2555
We take care of the whole system: analysis, documentation, technical controls, training and support. One partner instead of three.
Discuss your projectRisk assessment, Statement of Applicability and implementation of the Annex A controls — documented and actually working in your systems.
Processes, responsibilities and KPIs that help your team instead of slowing it down.
Explore the serviceAre you in scope and what do you need to do — clear and step by step.
Explore the serviceServers, networks, access and backups configured to best practice — so the controls in your documents also exist in your systems.
People are the first line of defence. We teach them to spot phishing in 5 seconds.
From quality and food safety to information security and social responsibility — one consultant for the whole system.
Full catalogue
ISO 9001ISO 13485IATF 16949ISO/IEC 17025 
HACCPISO 22000FSSC 22000BRCGS 
ISO 45001ISO 39001ISO 45003 
ISO 14001ISO 50001ISO 14064-1 
ISO/IEC 27001ISO/IEC 27701ISO 22301ISO/IEC 20000-1 
SA8000amfori BSCI · SMETAISO 37001ISO 37301 Every project comes with a dashboard showing readiness by clause of the standard and by Annex A control.
> Checking clause 10.2 — corrective action
Select a stage to see what you get and how long it takes. The certificate is issued by an independent accredited body — we guide you to the audit.
We compare your current state with the requirements of the standard and find what is missing.
Choose an industry and see the matrix: which standards are mandatory, which clients and tenders require and which give you an edge — by category.
| Category | Standards | Relevance |
|---|---|---|
| Quality | ISO 9001 IATF 16949 | Market requirement |
| Food safety | — | Not a priority |
| Health and safety | ISO 45001 | Recommended |
| Environment and energy | ISO 14001 ISO 50001 | Market requirement |
| Security and resilience | ISO/IEC 27001 | Recommended |
| Social responsibility | — | Not a priority |
Point at a standard to see why it matters for the industry.
Indicative only. Exact requirements depend on your size, activity and clients — we confirm them in the free consultation.
Answer 8 questions. The result is calculated instantly — no sign-up. Example answers are pre-filled; replace them with yours.
Do you have an approved information security policy?
Do you assess risks at least once a year?
Do you keep a register of IT assets and data?
Do you use MFA and role-based access?
Do you test restoring from backup?
Is there an incident response procedure?
Do you train staff on phishing?
Do you check your suppliers’ security?
We know the requirements from the auditor’s side.
We configure servers, networks and defences ourselves — controls are real, not on paper.
KISS principle: as much documentation as needed — not a page more.
Annual surveillance audits, risk updates, new employees.
ATLAS controls that actually work Most consultants write documents and IT firms configure hardware. We do both — so the controls in your documents also exist in your systems.
For a company of up to 50 people, usually 3 to 6 months, depending on the current state and available IT resources.
It depends on headcount, scope and your current state. After the free gap analysis you receive a fixed quote with no hidden fees.
It depends on sector and size. We run a quick check against the criteria of the Cybersecurity Act and tell you clearly whether you have obligations.
No. Certificates are issued by an accredited certification body. We prepare the system and stay with you during the audit.
No. We also cover the technical side: access, backups, protection and documenting the controls.
Yes. Both standards share a common structure (Annex SL), so an integrated system saves time and paperwork.
The certificate is valid for 3 years with annual surveillance audits. We can maintain the system: risk reviews, internal audits and training for new staff.
No such question in the list — ask us directly and we will reply.
Four short steps, about 2 minutes. The more precisely you describe the need, the more precise the quote.