ISO 27001 internal audits

Auditing - it's not everybody's cup of tea

Ok let's just be very real here - auditors are, well, different.

If you're not an auditor, you will take absolutely no pleasure from having to conduct your internal audits. Unfortunately there's no getting around it - you HAVE to conduct internal audits to satisfy the requirements of the ISO standards.

Not forgetting Clause 7.2 - Competence

The Standard also says that you must

ensure that these persons are competent...

When it comes to internal auditing, you will need to be able to demonstrate that whoever is conducting your internal audits is competent to do so:

...on the basis of appropriate education, training, or experience.

Don't panic, you can outsource it!

Happily, whilst named "Internal Audit", you are not obliged to deliver the audit internally - which means that you can outsource the audit to competent 3rd parties.

So let us help!

We actually love the process, and our love and enthusiasm is infectious.

Removing the hassle of audit planning

Planning your internal audits also sits under the requirements of 27001 (Clause 9.2). Depending on the size and shape of your organisation, planning your internal audits ranges from a bit of an inconvenience to a major headache!

We can take the hassle off you, fulfilling the internal audit planning on your behalf so all you have to do is:

• coordinate internal calendar bookings; and

• show up!

Delivering your ISO 27001 internal audit

This bit is a little weird...

We enjoy internal audits - and so do our clients! In case you don't believe us, see this post on LinkedIn, or review our testimonials!

We'll deliver your internal audits for you, providing helpful insightful feedback as we go (thanks to our experience and exposure to a huge range of business types, sizes and variety of ISMS implementations), along with a comprehensive audit report.

We'll also be robust - if there's something there to be found, we'll probably find it! That means you can fix the weakness before it becomes a problem (and before the external audit).

Other Standards

Whilst we're on the subject: we don't tend to shout about it, but as well as ISO 27001, we can also provide internal audits for ISO 9001 and ISO 14001.

A word about Management Review

We can also help support you with your ISMS' Management Review. Also a requirement of ISO 27001, a good Management Review can ensure helpful, useful Management Intelligence, driving senior level engagement and adding significant value to the ISMS for the business.