Description

Wolkvox conducts internal and external audits of its Information Security Management System (ISMS) as a fundamental part of its commitment to security and regulatory compliance. Certified under ISO/IEC 27001, the company performs semi-annual audits: internal audits are conducted by a team of internal auditors, while external audits are carried out by SGS, a specialized and internationally recognized entity.

This approach ensures that the ISMS remains aligned with international standards, identifies opportunities for improvement, and complies with legal and contractual requirements.

Characteristics

Internal Audits

• Annual frequency: It is carried out every year to evaluate compliance with ISMS controls and the effectiveness of security processes.
• Internal audit team: A trained and independent group within wolkvox conducts the audits, ensuring objectivity and in-depth knowledge of the processes.
• Focus on continuous improvement: Findings are documented and turned into action plans to correct deviations and optimize the ISMS.

External Audits

• Performed by SGS: The external provider SGS conducts annual audits (or as required by the standard) to validate compliance with ISO/IEC 27001 and other applicable standards.
• Objectivity and rigor: External audits provide an independent perspective, ensuring that processes comply with regulatory requirements and industry best practices.
• Certification and renewal: The results of these audits are key to maintaining and renewing ISO 27001 certification, reinforcing the confidence of customers and stakeholders.

Audit Process

• Planning: Scope, criteria, and timelines are defined for each audit, ensuring that all critical areas are evaluated.
• Execution: Auditors review documentation, interview staff, and verify the implementation of controls in the field.
• Findings report: A detailed report is issued with non-conformities, observations and recommendations, which are prioritized according to their impact.
• Follow-up: Wolkvox implements corrective actions and verifies their effectiveness, closing the improvement cycle.