ISMS Audit / Compliance

Detailed Audit Services

Detailed audit services to provide assurance that the security strategy is mature and being maintained as required by the relevant security standard. Example standards against which we have audited are: ISO/IEC 27001, ISF, HMG, COBIT, MAC, NIST, CPNI and the Gambling Commission RTS.

The difference between this and the other assessment services is that full evidence and validation of compliance will be sought against a defined scope and an agreed framework.

To date this service has tended to revolve around ISO27001 and PCI DSS , but has been used in several cases where clients have required very specific evaluation of compliance requirements such as CPNI, Mission assurance Category (MAC) and the GC RTS form the Gambling Commission.

Assessment can also be carried out to the new Cyber CREST three phase maturity model for cyber security incident response once the framework is agreed.

It may or may not involve Security Assurance consultancy, but dependent on the technologies used, expert knowledge/skill sets may be required (e.g. VOIP). Any technical resource requirements would be identified during scoping.

Standards have been authored for companies including NCP, Bourne Leisure and Mitie, amongst many others.