IT security compliance audit with standards

A detailed assessment of an entity's readiness to implement IT security requirements resulting from applicable standards and laws.

The audit aims to provide a detailed analysis of the organization's compliance with:  

• the National Interoperability Framework (KRI),
• the Act on the National Cybersecurity System (UoKSC),
• the ISO27001 standard,  
• the assumptions of the Digital Municipality project,  
• the assumptions of the Cybersecurity Local Government project.

The service includes an assessment of the entity's readiness to fulfill its obligations under the above-mentioned regulations. We offer a dedicated approach based on an assessment of the client's needs and a detailed identification and analysis of gaps in areas such as:

• risk management,
• system maintenance and configuration management,
• physical and environmental security,
• access management, 
• business continuity,
• supplier management,
• incident management.

After each audit, we prepare a report indicating non-compliance and threats in the existing IT security systems. We also present our recommendations for solutions aimed at increasing the level of information security and ensuring compliance with the relevant requirements.

It is also possible to conduct a different or partial compliance audit (depending on the specified standard) or an internal audit.

Do you have questions about the service or need a personalized offer? Write to us and ask about the service.