No. Accredited Bodies are strictly forbidden from auditing an ISMS they helped implement. You have to employ an independent third party for your audit to make sure the certification is legitimate. This pressure impacts productivity and morale through the Firm, producing extra stress that isn’t captured in money calculations. Training https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits