Baker Tilly Kuwait performs an advisory role, which will help business entities implement the detailed aspects of ISO/IEC 27001:2022 in their operating policies and procedures within the IT functions in connection with information security. The such advisory role covers the following activities in ISO 27001 Consulting Service:
Gap analysis.
Developing information security management system manuals.
Training.
Supervising the implementation process.
Internal audits.
Technical support during the certification process.
If the business entity does not have competent and objective auditors among its own staff, a contracted service provider can conduct these audits. These are referred to as “second party audits” and the service provider acts as an “internal resource. Therefore Baker Tilly Kuwait will be acting as the internal auditor on behalf of the business entity and conduct ISO 27001 Consulting service.
It is worth mentioning that Baker Tilly does not award ISO/IEC 27001:2022 certification.