ISO27Auditor

4 ms·

1. 1.▲
   by ISO27Auditor 11mo ago

   You don't need to use an external auditor that is your local audit provider, you just need to be sure that the audit provider (certification body) is accredited with an accreditation under IAF (eg IAS, UKAS, Dakks, COFRAC etc). Any acc
2. 2.▲
   by ISO27Auditor 2y ago

   ISO 27001 implementation and certification doesn't have to be overly expensive if you have the right team to help you. It also doesn't have to be time consuming as you can outsource a good deal of the work. I work as ISO 27001 au
3. 3.▲
   by ISO27Auditor 2y ago

   IMO just get ISO 27001 to demonstrate that you are managing the sensitive information properly, and you will also improve your client confidence. I work as ISO 27001 auditor, and help companies get ISO 27001 certified in no time (1-2 months
4. 4.▲
   by ISO27Auditor 2y ago

   Agreed. As an ISO 27001 auditor I see a growing demand for security compliance certification / attestations (ISO 27001, SOC 2), and it's client driven 95% of the time. So, in the end, it’s often worth it to go ahead and do it. ISO