ISO 27001 requires you to conduct an internal audit of your ISMS on a regular basis to verify conformity with the standard. Although it is called an “internal audit”, you can – and should – call in external support. Especially organizations that do not have a sufficiently qualified in-house auditor can save a lot of time and money with our Audit Services. We conduct your internal audits in accordance with ISO 27001 on your behalf and document the results so that you can use them as evidence in your certification audit.

Feel free to contact us for an initial consultation.

Tags

Share post

More articles

Many organisations trust that their own systems and applications “will be secure somehow”. Especially when third parties such as IT service providers or cloud services are used, the trust in IT security is great. Our...
“37.0 percent of companies in Germany do not regularly train their employees on topics such as spam or phishing. (…) Only every third company (35.5 percent) has a patch management policy. Yet security gaps in...
Checks of IT security are useful and advisable for a variety of reasons. External reasons such as regulatory requirements – the KRITIS regulation or the IT security law are examples – may require such reviews....