Internal Audit

Our process is designed to be efficient and thorough, aligning with ISO 27001 requirements while minimizing disruption to your lean team.

• Prerequisite: 90% Readiness: The audit will commence once your ISMS is at approximately 90% readiness. This means your policies, procedures, and controls are substantially implemented and documented, allowing our audit to focus on effectiveness. We can provide initial guidance to help you assess this readiness if needed.
• Kick-off Meeting (1 hour): An initial call to confirm the audit scope, schedule, key contacts, and any specific areas of focus.
• Documentation Review (Pre-Audit Prep): Our Lead Auditor will conduct a thorough review of your ISMS documentation (in Confluence) and GRC records prior to interviews.
• Audit Execution (Interviews & Evidence Collection): Conducted remotely, primarily through virtual meetings and screen-sharing sessions. We will interview relevant personnel (founders) and collect evidence of control implementation.
  • Audit Window: The active audit period will be conducted over two weeks, allowing for flexibility.
  • Time Zone: All audit activities, including meetings and interviews, will be conducted within the stakeholders timezone to align with our Lead Auditor’s schedule.
• Regular Check-ins: We maintain open communication throughout the audit to ensure transparency and address any immediate queries.