Home/Audits & compliance/Third-Party Audits (TPA)

Independent auditsyou can take into a negotiation.

We review your infrastructure, your outsourced providers and your IT processes against the contract, the SLA and the relevant standard — and give you a documented, evidence-backed report you can act on.

InfrastructureDC · cloud · networkVendorsMSP · colo · SaaSProcessesbackup · change · accessAuditevidence · interviews · testsFindingsrisk-ratedActionsowners · datesReportdefensibleSuzu Technology · Third-Party Audits (TPA) · sheet 53not to scale
Fig. 53 — Audit scopeInfrastructure → Vendors → Processes → Audit
Audits & compliance

What we do

Before a renewal, after an incident, or when the board asks “are we actually covered?” — an independent audit answers it with evidence. We test what the provider claims: backups restore, failover works, SLAs are met, access is controlled.

Reports are written to be used: risk-rated findings, evidence references, and actions with owners.

Included
  • Infrastructure auditDesign, redundancy, capacity, security, documentation
  • Vendor / MSP auditContract and SLA compliance, evidence, service reviews
  • Process auditBackup, change, access, incident against policy and standards
  • Technical testsRestore tests, failover tests, configuration reviews
  • Report & follow-upFindings, actions, re-audit on request
How it runs

The engagement, step by step

01

Scope

Assets, processes, locations and the clauses of the standard in scope.

02

Gap assessment

Every control reviewed against evidence; findings rated by risk.

03

Remediate

Owners, fixes and dates; policies and records built in your tools.

04

Certify

Mock audit, then support during the accredited body’s audit.

Commitments

What we put in writing

Written into the blueprint before work starts. If a number is not here, ask for it — we put it in writing.

IndependenceNo commercial relationship with the audited vendor
EvidenceEvery finding referenced to evidence
Timeline2–6 weeks depending on scope
PricingFixed fee by scope
FAQ

Questions we get asked

Can you audit our current MSP without them knowing?
We recommend a declared audit under your contract’s audit clause; we handle it professionally and the provider usually cooperates.
Do you audit public cloud setups?
Yes — AWS, Azure and GCP configurations against best practice and your policies.
Will you fix the findings too?
If you want us to; we keep audit and remediation separate so the audit stays independent.

Tell us the standard or the vendor. We scope it as a fixed fee.

Scope and quote within two working days.