ISO 27001 Auditing

The internal audit is scheduled to ensure minimum business disruption.

We only require attendance by staff members that are actively involved in the management and maintenance of the ISMS and those that are critical to it’s adherence within the business.

Our approach ensures that our customers are properly prepared for the internal audit.

We develop and communicate a suitable structure to the audit which includes what we need to assess, who needs to be involved and what ISMS artifacts are required to be provided for review during the actual audit.

Our audits are generally completed over Microsoft Teams. If there is a requirement to attend your location, then this can also be provided for (at an additional cost).

Our internal audits take approximately 1.5 days to complete, normally a day for the audit itself and a half day for the audit report.

We then arrange an online meeting to discuss the audit findings once the audit report is finalised and you have had the opportunity to review the list of observations and any non-conformities.

We will typically also discuss the areas where the ISMS can be improved as part of your continual improvement activities.

We can then provide any further assistance you may need to address observations and non-conformities.

Your appointed Auditor will have access to additional skilled and experienced ISO 27001 professionals who can make the necessary improvements needed to your ISMS.