Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform iso 27001 isms internal audit and gap analysis
ISO 27001 Lead Auditor, GCC GRC Consultant
ISO 27001 Lead Auditor (IRCA), CISM and CCSK certified cybersecurity GRC and resilience consultant with an MSc in Information Security (Tampere University). 7+ years helping organisations across the G...
About this Gig
ISO 27001:2022 ISMS internal audit and gap analysis, delivered as an audit-ready report: nonconformities, Statement of Applicability (SoA) review and a prioritised fix list.
Use it for your required internal audit (clause 9.2), pre-certification readiness, or a check before a surveillance audit.
WHAT'S INCLUDED
- Review of scope, policies, risk assessment and SoA against clauses 4-10 and Annex A
- Nonconformity and observation register with evidence references
- Remediation roadmap ranked by risk and effort
- Formal internal audit report you can show your certification body
HOW IT WORKS
- Send your scope, organisation size and current documents
- I audit the documents and, in higher tiers, interview control owners on a call
- You get the report, a findings walkthrough and revisions
WHY ME
ISO 27001 Lead Auditor (IRCA), CISM, MSc Information Security. 7+ years across GCC and European clients, including SAMA, NCA and UAE IA environments. 37 orders delivered, 5.0 rating, 100% on-time.
CONFIDENTIAL: your documents are used only for your audit. NDA available.
FAQ
Do you need access to our systems?
No. The audit is document and interview based. If you want evidence sampling, we agree the scope before I start.
Will this satisfy the ISO 27001 internal audit requirement?
The Premium package is structured as a formal internal audit under clause 9.2, with a report and nonconformity register. Check your certification body's expectations and I will align the format.
We are not certified yet. Can you still help?
Yes. Standard is built for pre-certification readiness. It shows which gaps to close before your Stage 1 and Stage 2 audits.
Do you also cover SAMA, NCA or UAE IA?
I can map findings to them as an add-on. Message me your regulator and scope before ordering.
What do I need to send?
Your scope statement, risk assessment, Statement of Applicability and main policies. I send a checklist after you order.
Is my information confidential?
Yes. Your documents are used only for your audit, and I can sign an NDA before you share anything.
