Auditing

---

Our staff serve as contract lead auditors and instructors for many well-recognized Certification Bodies (ISO) and other entities. If your organization requires specialized course development and delivery, Monforte’s team has designed and contributed to numerous professional certification curriculums.

All of our expert staff members are active instructors and courseware developers, with capabilities that now integrate AI-powered audit and assessment tools to improve accuracy, speed, and insight.

Areas of Audit & Instruction

Standard Application Workshops & Assessments

• ISO/IEC 42001 — AI Management Systems: AI governance readiness, gap analysis, and integration.
• ISO/IEC 27001:2013 — Information Security Management Systems: Assessment and implementation.
• ISO/IEC 27002:2022 — Information security, cybersecurity, and privacy protection controls: Assessment and adaptation.
• ISO/IEC 27701:2019 — Privacy Information Management Systems (PIMS): Assessment and implementation.
• ISO/IEC 27017:2015 — Security Controls for Cloud Services: Assessment and integration.
• ISO/IEC 20000-1 — Service Management Systems: Assessment and integration.
• ISO/IEC 27001 + ISO/IEC 20000-1 Integration: IT security as a feature of service.
• ISO 22301 — Business Continuity Management: Assessment and integration.
• NIST Cybersecurity Framework: Assessment and implementation.

AI-Enhanced Assessment Approach

We now combine our auditing expertise with AI-driven analysis to:

• Automate evidence collection and control verification.
• Detect compliance gaps in real time and map them to applicable standards.
• Perform predictive risk assessments to identify emerging threats before they materialize.
• Audit AI systems themselves for transparency, bias, robustness, and compliance readiness.

Our Workshop Deliverables

Whether delivered in person or remotely, our hands-on workshops provide participants with practical skills for implementing and managing these frameworks. Typical outputs include:

• A clear definition of the organizational context and its impact on the management system or framework.
• Identification of stakeholders / interested parties and their needs (including legal, regulatory, statutory, and contractual requirements).
• A Gap Analysis of processes and resources required to meet requirements.
• A project program detailing how the management system or framework will be implemented, converted, or improved.