Standards audit and compliance
We assess how well a company meets the requirements of information security, data protection (GDPR and Brazil's LGPD) and TISAX, identify the gaps and support the remediation right through to the audit. We know the process from the inside: QualityManager was the first software whose development process was certified by IQA (ABNT NBR ISO/IEC 29110-4-1:2020).
Compliance assessment
Gap analysis between current operations and the requirements of the standard, with priorities and an action plan.
Internal audit
Planned audits with criteria, sampling and evidence, and a report with graded findings.
Audit preparation
Support up to the external audit: documentation, records, team training and a mock audit.
TISAX preparation
Self-assessment with the VDA ISA questionnaire, choice of assessment level and objectives, closing the gaps and support until the label is obtained.
Non-conformities and corrective actions
Handling of findings with root-cause analysis, owners, deadlines and effectiveness checks.
Ongoing compliance
Keeping compliance after certification, with organised evidence, indicators and an audit calendar.
What a standards audit is for
A standards audit shows, with evidence, how far a company's operations meet the requirements of a standard or regulation: information security, personal data protection (GDPR in the European Union, LGPD in Brazil) or TISAX, which the automotive industry requires from suppliers that handle manufacturers' sensitive information. The outcome is more than a report: it is the list of gaps, the priority of each one and the plan to reach compliance before a customer, a certification body or a supervisory authority asks for it.
How we work
We start by understanding the context: which standard applies, what the scope is, which customers or contracts require it and what the deadline is. We then run interviews, review the existing documentation and check records and controls on site. When the standard calls for technical testing, we add penetration testing. From there we deliver a prioritised gap analysis, support the remediation with the client's team and carry out an internal audit or mock audit before the external assessment, so that nothing comes up for the first time on audit day.
Who it is for
Automotive suppliers whose customers have asked for a TISAX label, companies that process personal data of customers or staff and need to demonstrate GDPR or LGPD compliance, and organisations heading for a certification or a customer audit that want to arrive prepared. We work in Portugal and Brazil, with the experience of having been through certification ourselves: QualityManager's development process was certified by IQA.
Frequently asked questions
What is the difference between an internal and an external audit?
An internal audit is carried out at the company's own initiative, by an internal or contracted team, to check compliance and close gaps. An external audit is carried out by an independent body or by the customer and is the one that leads to the certificate, label or approval. Cyber1 performs the internal audit and prepares the company for the external one.
What is TISAX and who needs it?
TISAX is the automotive industry's information security assessment model, based on the VDA ISA questionnaire. Manufacturers require it from suppliers and service providers that handle confidential information, prototypes or personal data on their behalf.
How long does preparation take?
It depends on the scope, the standard and current maturity. The compliance assessment shows the gaps and lets us estimate the remediation time before any larger commitment.
Does Cyber1 issue certificates?
No. Certification is carried out by independent bodies. Our role is to assess, help remediate and prepare the company for the assessment, and to keep it compliant afterwards.
Do you handle GDPR and LGPD together?
Yes. For companies operating in Europe and Brazil, we run a single programme covering both laws, showing where the requirements overlap and where they differ.
Talk to a Standards audit and compliance specialist
Our team will assess your needs and reply within one working day.