Disclaimer

1. Nature of Estimates

The estimates provided by ISMS Calculator are:

• Ballpark figures only. They represent a rough order of magnitude, not precise quotations.
• Based on a generalized model. Sector multipliers, maturity factors and model reference values are generated by our own calculation engine: they are modelling assumptions, not measured market averages, and may not reflect your specific organizational context.
• Generated using algorithms and AI. The calculation engine uses algorithmic models and data derived from external research and AI-assisted analysis. These models have inherent limitations and assumptions.
• Subject to significant variability. Actual costs can differ by 50% or more depending on organization-specific factors such as geographic location, existing security posture, regulatory requirements, team experience, vendor choices, and scope changes.

2. Not Professional Advice

ISMS Calculator does not provide professional consulting, legal, financial, or auditing advice. The tool is designed as a planning aid to help you understand the general scope and cost of an ISO 27001 implementation. It is not a substitute for engaging qualified:

• ISO 27001 consultants or lead auditors.
• Information security professionals familiar with your industry and regulatory environment.
• Financial advisors for budgeting and procurement decisions.
• Legal counsel for compliance and contractual matters.

3. Model Reference Comparisons

The comparison values shown next to your estimate are generated by the ISMSCalculator cost model itself, by running the same engine against a representative organization profile for your sector and size. They are not survey data, market research or observed customer averages. These model reference values:

• Are modelling output, not empirical statistics: no percentile, pass-rate or market-average claim is made.
• Would in reality vary significantly by region, organization maturity, and specific regulatory requirements.
• Should be used as a relative orientation point only, never as a definitive industry standard.
• Are published in full, including every multiplier used, on our Methodology page.

4. Limitation of Liability

To the fullest extent permitted by Belgian and European Union law:

• ISMS Calculator is provided on an "as is" and "as available" basis.
• We make no warranties or representations, express or implied, regarding the accuracy, reliability, completeness, or fitness for purpose of any estimates or data.
• We shall not be liable for any loss, damage, cost, or expense (whether direct, indirect, incidental, or consequential) arising from reliance on the estimates, model reference comparisons, or recommendations provided by this tool.
• Users accept full responsibility for how they use the information provided.

5. Recommendation

We strongly recommend that you:

• Use ISMS Calculator estimates as a starting point for discussions, not as final budgets.
• Engage certified ISO 27001 professionals to conduct a formal gap analysis and scoping exercise.
• Obtain multiple quotes from qualified implementation partners.
• Factor in organization-specific risks, compliance obligations, and resource constraints that the tool may not capture.

6. Consultant Marketplace

The consultants listed in our Consultant Marketplace are independent third parties. ISMS Calculator does not vet, certify, endorse, recommend, or guarantee any listed consultant, their qualifications, availability, pricing, or the outcome of their services. Some listings may be sample or illustrative entries and do not represent real, available consultants.

Any decision to contact or engage a consultant, and any resulting agreement, is made entirely at your own discretion and risk. We strongly recommend that you conduct your own due diligence — including verifying credentials, references, and certifications — before entering into any engagement. ISMS Calculator accepts no liability for any interaction with, advice from, or services provided by marketplace consultants.

7. Company Information

This website and the ISMSCalculator service are published and operated by I4U Services BV (trading as ISMSCalculator), Luikersteenweg 543B, 3800 Sint-Truiden, Belgium — enterprise number 0897.752.915, VAT BE 0897.752.915. Contact: support@ismscalculator.com.

8. Contact

If you have questions about this disclaimer or the service, please contact us at support@ismscalculator.com.