CPA Partnerships

CPA Partnerships

Cybersecurity Firm Partners in the Leading US/UK Markets to Certify Your ISO 27001 Compliance

Free Support

Free Support

Friendly Consultants & Automation Technology to Get Started Without Costs or Commitments

Affordable Services

Affordable Services

Experienced Consultants and Technology-Enabled Audit Processes to Achieve Cost Savings

Australian Based

Australian Based

Providing Local Services for Readiness Reviews and Audits Across Asia-Pacific

ISO 27001 Certification Steps

We Support the End-to-End Steps Including Coordination with our AICPA Cybersecurity Partners.


An optional assessment for those pursuing ISO 27001 certification for the first-time. We assess your readiness to undergo the following Stage 1 and Stage 2 audits.

Stage 1 Audit

Reviews your company practices and documentation to confirm it is in compliance with the requirements of ISO 27001. We usually review on-site with management walkthroughs over 1-2 days.

Stage 2 Audit

Tests the degree of conformance of your Information Security Management System (ISMS) with ISO 27001 by reviewing your policies, procedures, internal audits, management reviews, and any other ISMS documentation.

Surveillance Audit

To ensure ongoing conformity of your ISMS with ISO 27001, surveillance audits are performed for the following two years while the certification remains valid. We follow a risk-based approach to confirming ongoing conformance to the ISO 27001 requirements.

ISO 27001 Internal Audits

Maintain Your ISMS Compliance with ISO 27001 by Engaging Independent Internal Audit Services.

Internal Audit Strategy

We work with you to form a Terms of Reference (ToR), or Internal Audit Plan, with a strategy for periodically assessing your Information Security Management System (ISMS). We follow the direction of management objectives and a risk-based view of the ISMS.

Internal Audits

Our audits are usually conducted during 1-2 days on-site to understand the sentiment and culture of the team, in combination with prior or subsequent documentation review. We issue an internal audit report with insights for management and to demonstrate conformity to ISO 27001 requirements for internal audits.


Where observations from audit issues or opportunities for improvement are identified, we agree on action plans with management. As an optional service, we can monitor and validate the closure of observations raised.