Real-time Tracking of Auditing Process Progress with a Customizable Application for Cybersecurity Standards Compliance: A Case Study on ISO 27001 and TISAX
Mohamed Zelmati, Zakariae Oulqaid, Abdelmajid Elouadi · 2023
Certifications such as ISO 27001 and TISAX are crucial for organizations seeking to bolster cybersecurity and protect against evolving cyber threats. However, the process of obtaining these certifications involves navigating a rigorous auditing process fraught with challenges. This research paper addresses the difficulties faced by auditors in adapting to constant updates in regulatory requirements, relying on static tools during the gap analysis stage, and managing effective communication and collaboration with clients. Additionally, challenges in real-time tracking of client progress, document management, and generating on-demand reports further complicate the auditing process.To overcome these obstacles, this study introduces AUTOSYS as a proposed solution, detailing the technologies employed, the audit process, the web application architecture, and the implemented security measures. AUTOSYS is a highly customizable web application, for real-time audit monitoring. By leveraging real-time notifications and enabling continuous tracking of audited company activities, including tasks, incidents, and risks. The application incorporates a personalized checklist that adapts to norm requirement updates, thereby facilitating enhanced evaluation of norm compliance and maturity. Furthermore, the proposed solution streamlines audits by effectively managing shared checklists, ensuring efficient document management, and upholding privacy controls.