Tenders Are Invited For Audit Of The Information Security Management System As Part Of The Project Entitled: Improving The Level Of Cybersecurity In Sanok County

The Subject Of The Order Is The Implementation Of The Task Titled: Audit Of The Information Security Management System As Part Of The Project Entitled: Improving The Level Of Cybersecurity In The Sanok County Assessment Of The Quality Of The Applied Security Systems Of The Implemented Isms Through The Implementation Of A Comprehensive Security Analysis Along With Vulnerability Tests. As Part Of The Work, The Contractor Is Obliged To:1. Conducting A Full Audit Of The Ordering Partys Information Security Management System In Accordance With The Internal Audit Methodology, Including A Review Of Documentation, Assessment Of The Risk Analysis Process Along With A Review Of Assumptions And Results Obtained, Assessment Of The Completeness Of Documentation, Initial Identification And Description Of Potential Non-Compliances If Detected. Audit Of Documentation And Information Security Management Principles, Including Personal Data, Verifying The Level Of Implementation Of Activities Required By The Isms.2. Assessment Of The Isms In Relation To The Requirements Of The Act On The National Cybersecurity System In Terms Of Procedures, Standards, Normative And Operational Documentation And Security Methods Used, As Well As Procedures Related To Risk Management, Incident Handling, Event Reporting And Communication With Supervisory Authorities.3. Assessment Of Compliance Of The Risk Assessment Process With Iso27001 And Uksc - Verification Of The Risk Analysis Process, In Particular In Terms Of Risk Identification And Risk Management. Analysis Of Methodology And Documentation.4. Conducting An Audit Of The Applied Security Measures In Accordance With The Methodology Consistent With Annex A Of The Iso27001 Standard. Comparison Of The Actual Situation With Requirements, Evidentiary Tests And Maturity Assessment.