Service · It comes round every year
Internal audit
The annual internal audit of your security system, by someone who did not implement it.
Get in touch about this serviceWhat stays
Delivered as a report: findings, nonconformities and observations.
What it includes
- Audit programme
- Review of controls and evidence
- Interviews with the owners
- Report with findings and observations
When
Every year
Example: September
An example of the month it fits. The real calendar is agreed with you.
How it is delivered
Step 1
Fixed-scope engagement
We agree scope, deliverable and calendar in a written proposal.
Step 2
Work with your team
We work with your owners and, if you use the platform, inside it, with the access you grant us.
Step 3
You receive the report
We hand over the report and go through it with you.
Step 4
Next time starts here
What stays is the starting point for the next review, not a document that gets lost.
What we don’t do
We do not carry out the internal audit of a system we implemented or manage.
Goes well with
- Service · Every year
Pre-certification audit
We audit your system the way the certification body would, so you can fix things before the real audit.
- Service · Every year
Risk assessment
The annual risk assessment of your security system, with MAGERIT and PILAR when it is for the ENS.
Shall we talk about this service?
Tell us where you stand and we will send you a fixed-scope proposal.