Consulting · US market
ISO consulting for companies working with US customers
US customers judge suppliers through supplier audits and security questionnaires. We build the management system that answers them — gap analysis, documentation, training and internal audits, all in English.
What we do for you
Where you stand against the standard and against your customer's supplier requirements.
Policies, procedures and records built on how you actually operate — not templates nobody follows.
We help you answer customer security and supplier questionnaires with evidence from a working system.
So the people a customer's auditor talks to can explain what they do and show the records.
We test the system before your customer does, and help you close every gap.
Yearly internal audits, updates when requirements change, and a consultant who knows your system.
One security system for ISO 27001 and SOC 2 requests
US enterprise buyers often ask software and service suppliers about ISO/IEC 27001 or SOC 2. Both come down to the same question — can we trust you with our data? — and they rely on largely the same controls: risk assessment, access control, supplier management, incident response and monitoring.
We implement those controls once, as an ISO/IEC 27001 information security system, with the policies and evidence to back them — so you can answer either request from the same working system.
What we implement, by sector
ISO 27001, ISO 27701 for privacy, ISO 22301 for continuity and ISO 42001 when AI enters the product.
ISO 9001 as the baseline for supplier approval, with ISO 14001 and ISO 45001 increasingly requested by large buyers.
US importers expect robust food safety systems from suppliers. We build the HACCP and ISO 22000 foundation their requirements rest on.
We implement ISO 13485 quality systems, with documentation structured for the way US customers review suppliers.
How a project runs
- Send us what you received — the questionnaire, supplier requirements or the standard your customer named.
- Gap analysis — a clear picture of what already works and what is missing.
- Plan and quote — scope, timeline and what we need from your team.
- Implementation — documentation, controls, training and records.
- Internal audit — we test everything and fix what needs fixing.
- Ready for your customer — for their audit, their questionnaire, and certification if you choose to pursue it.
Working across time zones
We are based in Montenegro (Central European Time), which overlaps with the US East Coast for most of the American morning. Workshops and reviews happen in that overlap; documents move asynchronously; everything is delivered in English.
We have worked in standards since 2014, with a network of experienced consultants across sectors.
Working with a US customer?
Send the questionnaire or requirements you received and the size of your company — we reply within 24 hours with a realistic implementation plan, timeline and budget.