ISO 27001 Audit documentation

Scope of Work – ISO 27001:2022 Implementation & Certification Support We have all policy documents ready. This has to be reviewed and corrected as required. We need evidence documents for the ISO internal audit and then we will engage TUV for final ISO certifications. We are seeking an experienced ISO 27001:2022 consultant to assist our organization in achieving ISO 27001 certification. The selected consultant will be responsible for the following: Key Responsibilities Perform a comprehensive ISO 27001:2022 Gap Analysis to assess current information security practices and identify areas requiring improvement. Define the Information Security Management System (ISMS) scope and determine applicable Annex A controls. Develop, review, and enhance ISMS documentation, including: Information Security Policies Procedures and Work Instructions Templates and Forms Statement of Applicability (SoA) Risk Management Documentation Other mandatory ISO 27001 documents and records Conduct information security risk assessments and prepare a Risk Treatment Plan aligned with ISO 27001 requirements. Provide practical guidance and recommendations for implementing selected security controls. Support the organization throughout the certification process, including: Stage 1 Audit Preparation and Support Stage 2 Audit Preparation and Support Responding to auditor questions and clarifying ISMS documentation Conduct one complete Internal Audit prior to certification. Facilitate a Management Review Meeting (MRM) and provide the required documentation and recommendations before the certification audit. Deliverables ISO 27001:2022 Gap Analysis Report ISMS Scope Definition Statement of Applicability (SoA) Risk Assessment and Risk Treatment Plan Complete ISMS Documentation Set Internal Audit Report Management Review Meeting Documentation Audit Readiness Support for Stage 1 and Stage 2 Certification Audits Preferred Qualifications Proven experience implementing and certifying organizations against ISO 27001:2022 Experience conducting internal audits and risk assessments Strong knowledge of Annex A controls and ISMS documentation requirements Lead Implementer and/or Lead Auditor certification preferred