ISO 27001 certification cost in the UK

UKAS-accredited bodies charge about £1,250-1,500 per audit day in 2026, large bodies £1,759. For 50 people the first 3 years hold about 17 audit days: £21,250-25,500 before fees.

3-year audit cost by size

Audit days and cost in the first 3 years, before fees and travel
People Days At £1,250 At £1,500 At £1,759
10 8 £10,000 £12,000 £14,072
50 17 £21,250 £25,500 £29,903
200 23 £28,750 £34,500 £40,457

Public UK prices

Published UK prices for ISO 27001 certification
WhatPriceYear
Online certificate without accreditation, up to 25 employees £1,295 plus VAT, then £295 per year 2026
UKAS-accredited Stage 1 and Stage 2, under 50 employees £6,800-10,000 2026
Large UKAS-accredited body, under 10 people, 3 audit days £6,804 initial audit, incl. £1,527 fees 2025
Office for Nuclear Regulation tender, 2026-2029, UKAS only £29,000 estimated 2026
Ofqual contract with BSI, 3-year cycle £36,502 2025

The large-body quote is the clearest example of fees: £365 to apply and £1,162 for programme management, before any audit day. Its day rate, £1,759, is above the typical rate. Bodies without UKAS accreditation charge about £800-1,000 per day.

A real UKAS quote, checked

A UK consultant published a quote that a large UKAS-accredited body gave a firm with fewer than 10 staff and 5 legal entities. We ran its figures through the quote check.

  • Year 1: Stage 1, 1 day, and Stage 2, 2 days, at £1,759 a day. £365 to apply and £1,162 for programme management.
  • Years 2 and 3: 1 surveillance day at £1,759, a £599 management fee and £149 for each extra legal entity, every year.
  • Total for the first 3 years: £13,010. The quote shows £6,804 for year 1, so years 2 and 3 add £6,206.

Result: clarify before you sign

  • Too few audit days. 3 days for Stage 1 and Stage 2. For under 10 people the starting point is 5 days, and the largest allowed reduction leaves 3.5 days.
  • Fees and travel are 32% of the total. £4,215 of the 3-year total is not audit time.
  • Prices for years 2 and 3 not fixed. The quote does not fix the prices of the surveillance audits. Day rates rose in 2025 and 2026 in published guides.

The yearly fees show up only after year 1, and the fee per legal entity grows with each company you add to the certificate. Open this quote in the check and change the figures to yours.

Check the UKAS accreditation

UK buyers and public tenders often ask for UKAS accreditation. Search the body in the UKAS register and check that ISO/IEC 27001 is in its scope. A body accredited in another EA country can also issue an accepted certificate; ask your customer first.