ISMS Certification Preparation (Phase IV)

Internal-Audit
Preparation for certification involves an internal from a qualified ISO 27001 Lead Auditor who was not involved in the development efforts. This insures an objective view that would best represent an external auditor perspective. The internal audit will look and feel like an ISMS certification audit and will help prepare you for the actual certification/registration audit. It is important to understand that the closed loop system for continual improvement, by definition, means that there are always improvement activities being conducted and tracked. All controls do not need to be at a CMM Level 3, however, they should be identified and tracked through implementation. Evidence of conformance to corporate Policy, Standards and Program Strategy must exist, but 100% implementation is not the criteria that a certification is awarded upon.

Option 1: Oversight of an existing Internal Audit capability
For those organizations with an existing internal audit program, our IRCA registered ISO 27001 auditors will act in a Lead Auditor capacity to establish a long term ISO 27001 conformant audit plan, as well as lead and mentor client auditors in the execution of an internal audit in preparation for certification.

Option 2: Contract Internal Audit
For those organizations without an existing internal audit program, our IRCA registered ISO 27001 auditors will establish a long term ISO 27001 conformant audit plan, as well as execute the internal audit in preparation for certification. This audit plan may serve as the basis for future contract audit RFP's

Certification Advisory Services
Orange Parachute staff may be present during the certification audit, however, it is your staff that must be the primary participants. Advisory services provide onsite expertise from consultants that have been through the certification audit process and can ensure a successful audit experience.

Timeline: 1 Week – Pre-Audit, 1 Week – Advisory Service

Deliverables:

• Audit report with findings such as, potentially Major/Minor Non-Conformities, observations and areas for improvement in preparation for the certification audit