Home / Comparison
Three honest ways to do this
A cited record, a consultant, or a spreadsheet. Each is right for someone, and this page says which, including the cases where this product is the wrong choice.
| Question | This record | A consultant | A spreadsheet |
|---|---|---|---|
| What you get | One cited record per changed clause, with evidence and a test, kept current against the ISO feed | A reading of the amendment for your estate, in meetings, over weeks | A tab with your own notes and no citation |
| Time to a first answer | Under an hour | Two to six weeks to a first draft | An afternoon to set up, then it drifts |
| What it costs | USD 799 one off, or nothing for the free pages | A day rate, usually four figures | Your own time, and the cost of a missed clause |
| Where it is weak | It does not know your estate. The check reads your answers, not your systems | It knows your estate and cannot be re-run on publication day | It has no source, so a reviewer cannot check a line |
| On publication day | The refresh script fails on the stage change and the record is rebuilt | A new engagement | Someone remembers, or nobody does |
When this record is the right choice
- You need a defensible answer fast and you can check a citation yourself.
- You want the same register to survive publication day, rather than a document that expires.
- You need the evidence list, not only the requirement.
When a consultant is the right choice
- You need someone to read your own systems and sign the assessment.
- The estate is large enough that the inventory itself is a project.
- You need a person in the room with the regulator or the auditor.
When a spreadsheet is enough
- You have one mechanism in one product and a named owner who reads standards.
- Nothing in your contracts or your scheme points at the standard.
What none of the three does
None of them certifies you, because there is no certificate for this standard. None replaces your cryptography policy. And none decides applicability under a law.
Not legal advice; does not certify. Not affiliated with ISO or the IEC.