Independent Audit
What we do → Trust & Assurance
Independent Audit
Independent evaluation of your governance, risk, and control environment — assessed for effectiveness, maturity, and compliance with the standards you are measured against.
Independent audit engagements by certified lead auditors. Scoped to the question your board, regulator, or acquirer actually needs answered.
Audit types we deliver
- Internal audit against ISO 27001, ISO 27701, ISO 42001, ISO 22301
- Pre-certification readiness audit
- Independent assurance for CBUAE, SAMA, and other regulator-mandated reviews
- Vendor and acquisition audits with scoped technical and process coverage
Lead auditor credentials
CISA · ISO 27001 Lead Auditor · ISO 42001 Lead Implementer · PCI QSA · SWIFT CSP Assessor. Named on the engagement — no handoffs.
Our approach
Independent audit is run as a sealed exercise. Scope is agreed with the sponsor and the assurance consumer (board, regulator, acquirer) up front. Working papers are retained in a tamper-evident audit workbook. Findings are issued with management responses captured on each. The lead auditor presents to the audit committee on close.
Typical engagement
- Phase 1. Scoping and sponsor alignment (1–2 weeks)
- Phase 2. Fieldwork and evidence collection (3–6 weeks)
- Phase 3. Draft findings and management response (2 weeks)
- Phase 4. Final report and audit committee presentation
Prerequisites
- Named engagement sponsor on the client side
- Read-Only Access to Systems in scope
- Access to policies, standards, procedures and prior audit reports where available
- Point of contact for each control owner function
Related practices
