The Only section You can't do oneself will be the certification audit, which needs to be carried out by an exterior accredited human body. ISO/IEC 27006 specifies demands for bodies offering audit and certification of an ISMS. It's the regular certification bodies must adjust to to problem accredited ISO 27001 https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits