Start

PRE-AUDIT ⚫️⚫️🔴

Performing internal ISMS pre-audits worldwide in preparation for an official audit.

Audit basis

ISO 27001, ISO 27017, ISO 27019
VDA-ISA (TISAX®)
VAIT
IT security catalog (IT-SiKat according to §11 1a & 1b EnWG)
Industry-specific security standard (B3S KRITIS)
Guidance and specification of the requirements for the measures to be implemented in accordance with §8a section 1 of the BSIG
Attack detection systems (SzA OH)

‘Regular’ in the TISAX context: A guide for companies and consultants

This article examines the meaning and interpretation of the term ‘regular’ in the TISAX® context.

The role of internal ISMS on-site audits

I will discuss the importance of on-site audits and explain why they are essential to the integrity and effectiveness of the audit process.

Critical Infrastructure: Drone Identification Systems

The recent incident in Brunsbüttel, where drones were repeatedly sighted over one of the largest chemical parks in Schleswig-Holstein…

Update 2024: Which laws are particularly relevant in the context of information security?

An updated overview of laws and some contractual requirements that can/should influence the policies in an ISMS.

(Draft) Information Security Guideline

Global Information Security Policy: Clear guidelines and flexible implementation for maximum security and efficiency.

VDA ISA: Must and Should Requirements

Must requirements are mandatory, while should requirements have to be implemented unless there are good reasons against it.

How you can immediately shed light on the shadow IT of web services

Microsoft Cloud App Security can secure the use of external web services through comprehensive risk assessments and compliance controls.

ISMS Scoping

In this article, I will discuss ISMS scoping in accordance with ISO 27001, TISAX® and KRITIS.

TISAX® vs. ISO 27001: A comparison of the rating of non-conformities

Differences and similarities in the evaluation of major and minor non-conformities in the TISAX® assessment and ISO 27001 audit...

What are the ISMS resource requirements?

Have you been told that an ISMS can be implemented quickly? Click here...

What clients and cooperation partners say:

"Hello Mr. Borgers, thank you very much for your support for and during the ISMS certification of our network company. Your expertise in the pre-audit was particularly important for the subsequent successful certification according to the IT security catalogue in accordance with the Federal Network Agency and ISO 27001. I hope for continued successful cooperation."

Mathias Zeiss via LinkedIn | Stadtwerke Mainz Netze

An internal pre-audit in the field of information security offers companies a number of advantages:

First of all, a pre-audit gives the organisation the opportunity to prepare for certification and to identify and rectify any potential weaknesses in the security processes. This can help the company to be more successful in the actual certification process and may also save costs that would be incurred by repeat audits.

Another advantage is that it helps the organisation to better understand the certification body's requirements and to ensure that all the necessary processes and procedures have been implemented in the organisation. This can help the organisation to be more successful in the certification process and to avoid possible queries or complaints.

Unlike a pre-audit conducted by a certification body, which is not usually allowed to make any comprehensive recommendations, I can make such recommendations. This gives the organisation the opportunity to prepare for possible weaknesses and to remedy them before certification.

Advantages of a pre-audit by an appointed auditor: