Services
Pre-audit and readiness work for companies that need to show their information security is under control, with a focus on third-party risk.
What we offer
ISMS pre-audit
We assess your information security management system against ISO 27001 before a customer or certification body does. We review your scope, risk assessment, Statement of Applicability, baseline controls and the evidence behind them.
- A gap report against the standard
- A list of missing or weak evidence
- A prioritised action plan
Customer requirements review
We compare your controls with what your customers ask for in security questionnaires and contract clauses, and help you answer accurately without promising what you cannot yet prove.
- A map of customer requirements to your controls
- Reviewed answers with supporting evidence
- A list of requirements you cannot yet meet, and how to close them
Third-party security assessment
If you rely on suppliers, we assess how well they protect your information and data, against your own requirements and the risks the supplier creates for you.
- Assessment of the supplier's controls and evidence
- Findings ranked by risk
- Follow-up questions and actions for the supplier
Audit preparation
Before a certification audit or a customer audit, we walk through what the auditor will ask and check that your people and records are ready.
- A mock walkthrough of the audit
- Feedback on documents and records
- A final checklist of items to fix
Who it is for
- Suppliers to banks, insurers and other financial companies that receive security questionnaires and audit requests.
- Companies planning to certify to ISO 27001 that want to know where they stand first.
- Companies that want their own suppliers assessed.
Not sure which service you need?
Book a free call and describe your situation. We will tell you which service fits and what it involves.
Book a free call