Auditor Directory
ISO 27002 Auditors
ISO/IEC 27002:2022 Information Security, Cybersecurity and Privacy Protection — Information Security Controls
Browse accredited firms offering ISO 27002 audits. Filter by location, size, and budget.
44 firms — interactive filtering loads below.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
Bureau Veritas
Paris, France
Bureau Veritas is a world-leading testing, inspection, and certification company providing ISO 27001 and management system certifications in 140+ countries.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Deloitte Middle East
Dubai, UAE
Deloitte Middle East is the region's largest professional services firm, providing Big Four audit, assurance, and advisory services across the MENA region.
Deloitte Tohmatsu
Tokyo, Japan
Deloitte Tohmatsu is Deloitte's Japanese member firm and one of Japan's largest audit firms, providing Big Four services including J-SOX and ISMAP compliance.
DNV
Oslo, Norway
DNV is a global assurance and risk management company providing ISO 27001, ISO 22301, and management system certifications across 100+ countries worldwide.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
EY Japan
Tokyo, Japan
EY Japan (EY ShinNihon) provides Big Four audit, assurance, and advisory services with expertise in J-SOX, ISMAP, and Japanese regulatory compliance.
EY MENA
Dubai, UAE
EY MENA provides Big Four audit, assurance, tax, and advisory services across the Middle East and North Africa with offices in 15+ MENA countries.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG Australia
Sydney, Australia
KPMG Australia provides Big Four audit, assurance, and cybersecurity services with deep expertise in APRA, CPS 234, and Australian regulatory compliance.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG Lower Gulf
Dubai, UAE
KPMG Lower Gulf is KPMG's UAE and Oman practice, providing Big Four audit, assurance, tax, and advisory services across the Gulf region.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
SGS
Geneva, Switzerland
SGS is the world's largest testing, inspection, and certification company, providing ISO 27001 and management system certifications across 140+ countries.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TUV Rheinland
Cologne, Germany
TUV Rheinland is a world-leading German certification and testing body providing ISO 27001, TISAX, and management system certifications across 60+ countries.
TUV SUD
Munich, Germany
TUV SUD is a leading German testing, inspection, and certification body providing ISO 27001, TISAX, and management system certifications across 50+ countries.
BDO UAE
Dubai, UAE
BDO UAE is BDO International's member firm in the UAE, providing audit, tax, and advisory services with strong compliance capabilities for Gulf businesses.
CERT-In Empaneled Auditors
New Delhi, India
CERT-In empaneled auditors are organizations authorized by India's Computer Emergency Response Team to conduct cybersecurity audits for regulatory compliance.
ComplianceForge
Scottsdale, Arizona
ComplianceForge provides cybersecurity documentation templates, consulting, and NIST/CMMC/ISO implementation support for organizations building compliance programs.
ControlCase
Fairfax, Virginia
ControlCase is a compliance and cybersecurity firm specializing in PCI DSS, SOC 2, ISO 27001, and HITRUST audits with a unified compliance approach.
Infosys BPM
Bangalore, India
Infosys BPM provides cybersecurity, compliance audit, and risk management services leveraging Infosys's global delivery model across 30+ countries.
Intertek
London, United Kingdom
Intertek is a global quality assurance provider offering ISO 27001, ISO 22301, and management system certifications through operations in 100+ countries.
IT Governance
Ely, United Kingdom
IT Governance is a UK-based cybersecurity and compliance firm providing ISO 27001 implementation, GDPR consulting, and certification support services worldwide.
NQA
Warwick, United Kingdom
NQA is a UKAS and ANAB accredited certification body providing affordable ISO 27001, ISO 22301, and management system certifications for organizations globally.
Prescient Assurance
Toronto, Canada
Prescient Assurance is a startup-friendly CPA firm offering affordable SOC 2, ISO 27001, and HIPAA audits with fast turnaround for growing companies.
Protiviti India
Mumbai, India
Protiviti India provides internal audit, IT risk, and compliance services including ISO 27001, SOC 2, and CERT-In assessments for Indian enterprises.
Protiviti Middle East
Dubai, UAE
Protiviti Middle East provides internal audit, IT risk, and compliance services including ISO 27001 and SOC 2 for organizations across the Gulf region.
Risk Crew
London, United Kingdom
Risk Crew is a UK cybersecurity consultancy providing ISO 27001, GDPR, and penetration testing services for startups and mid-market technology companies.
SRKAY Consulting
New Delhi, India
SRKAY Consulting is a CERT-In empaneled cybersecurity and compliance firm in India offering ISO 27001, SOC 2, GDPR, and PCI DSS consulting services.
TUV Nord
Hanover, Germany
TUV Nord is a German certification body providing ISO 27001, TISAX, and management system certifications with strong European and Asian market presence.
Vista InfoSec
Mumbai, India
Vista InfoSec is a global cybersecurity and compliance firm offering PCI DSS, SOC 2, ISO 27001, and GDPR assessments at competitive international pricing.