INFORMATION SECURITY AUDIT

Information Security Audit & Risk Assessment

Comprehensive audits and risk-assessments to strengthen your security posture, maintain compliance, and support robust governance.

HOW SHCO DELIVERS SECURITY AUDITS

Strengthening Security Through Effective Audits.

Information security audits are a vital aspect of the security governance process, and it’s in your organisation’s best interest to make sure they’re done right.

SHCO offers a range of security audit and risk assessment services designed to maintain compliance with internal policies, external standards, and legal obligations. Guidance to assess the security capabilities of your key suppliers plays a key role in this.

An internal audit is a vital tool in maintaining the viability of your information security management system. Clause 9.2 of ISO 27001 requires that you implement an appropriate internal audit program. Simon Hunt has experience with ISO 27001 audits in a wide range of organisations and can provide expert assistance with your audit workload. See below for typical security audit and risk assessment engagements undertaken:

Information Security Audit Services

The best way to kick off an Information Security or Data Protection improvement project is by analysing where you currently stand. We will quickly help you assess the suitability of your policies and your physical and technical controls and identify your priorities.
We help different organisations in different ways. You may wish to outsource your entire internal security audit program to us or just use our services to help clear an audit schedule backlog or when you need a fresh pair of eyes from time to time.
Since the arrival of GDPR in May 2018, many organisations have increased their internal audits in relation to Data Protection compliance, largely due to the increased risks and penalties. We can help you ensure that your Data Protection Management System audits provide the appropriate coverage to ensure compliance with your internal policies and processes and with the DPA 2018 and GDPR.
Supplier security management is a vitally important aspect of security for many companies particularly where data is shared with suppliers. We can provide expertise throughout the supplier relationship lifecycle from initial due diligence audits through ongoing contract compliance audit to contract termination reviews.
We work with many larger companies where the growth of the due diligence workload has increased rapidly in recent years due to new supplier management requirements as well as mergers and acquisitions.
It is not uncommon for due diligence requirements to have a certain urgency attached to them, so you may find that you need a safe pair of hands to call upon at short notice. If that sounds like you, we can respond quickly and help ease your due diligence workload.