Provision of an ISO27001 Internal Auditor - Readvertised

Manylion y contract

---

ID:

147136

OCID:

ocds-kuma6s-146365

Math o gontract:

Gwasanaethau

Math o weithdrefn:

Agored

Hysbysiad dyfarnu contract cyf:

JAN496953

Cyf mewnol:

Portal Ref: 147136

Cysylltwch â'r Catergory:

C - contract lleol ar ran un prynwr sy'n contractio yn unig.

Prynwr:

Social Care Wales

Cod CPV cynradd:

N/a

Cod (au) CPV ychwanegol:

A yw'n fframwaith:

Nac Ydi

Cynllun lleihau carbon:

Dewisiadau:

Disgrifiad:

Introduction ISO 27001 is an internationally recognised standard for managing and maintaining information security within businesses. It outlines the requirements for an information security management system (ISMS), and provides a framework for establishing, implementing, maintaining and continually improving business information security. Social Care Wales has held ISO 27001:2013 certification since 2008, achieving our most recent triennial recertification in April 2024. We are amid transitioning to the 27001:2022 standard and are due to transition in February 2025. What is required / ‘The Requirements’ We are seeking the provision of an ISO 27001 Internal Auditor to evaluate and ensure the continued effectiveness and compliance of our Information Security Management System (ISMS) in accordance with the ISO 27001 standard. The audit should be performed independently and aligned with the requirements of the ISO IEC 27001:2013 (ISO 27001) standard. The Internal Auditor will: - Prepare and agree an ISMS audit scope and engagement letter with Social Care Wales; - Review and assess the ISMS documentation, including policies, procedures, and controls in line with the standard; - Plan and execute internal audits, including the preparation of audit plans and schedules; - Interview relevant personnel and gather evidence to assess compliance and effectiveness; - Evaluate the implementation of risk assessments and treatment plans; - Analyse audit findings and prepare detailed reports outlining strengths, weaknesses, and recommendations for improvement; - Present findings to senior management and relevant stakeholders; - Follow up on previous audit findings to ensure corrective actions have been implemented; - Follow through any external certification audit findings and remedial actions received by Social Care Wales. Please see Specification for more detail

Tîm Prynu:

N/a

---

Dyddiadau'r contract

---

Dyddiad a ddyfarnwyd:

08 Ionawr 2025

Dyddiad cychwyn:

15 Ionawr 2025

Dyddiad gorffen:

15 Ionawr 2026

---

Estyniadau contract

---

Dyddiad gorffen contract estynedig:

-

Opsiynau estyniad Max ar gael:

12 (misoedd)

---

Gwybodaeth ychwanegol

---

Gwybodaeth ychwanegol:

---

Manylion cyswllt

---

Enw'r contract:

Procurement Team

E-bost contract:

N/a

---