Complimentary

Internal Audit

For small and medium businesses working towards ISO/IEC 27001, ISO/IEC 42001 or SOC 2. Find your gaps before your certification body does, assessed by a qualified Lead Auditor.

Cyber Con Melbourne · Exclusive offer

AUD 400 application fee applies

Non-refundable · Limited to 10 organisations · Apply by 31 December 2026

Two ways to test your readiness

Audit days: complimentary. AUD 400 non-refundable application fee.

Gap assessment, 1 day

  • Readiness review against the AICPA Trust Services Criteria

  • Walkthrough of your key controls, policies and evidence

  • Prioritised summary of gaps ahead of a Type 1 or Type 2 examination

  • Internal audit conducted in line with Clause 9.2 of the standard

  • Coverage of management system clauses 4 to 10 and a sample of applicable Annex A controls

  • Opening and closing meetings with your team

  • Written internal audit report with nonconformities and opportunities for improvement

Internal audit, up to 2 days

Assessment day: complimentary. AUD 400 non-refundable application fee.

ISO/IEC 27001 · ISO/IEC 42001
SOC 2

How it works

From application to report

Apply

Email us your details or call. We confirm eligibility and availability.

A short call to agree the framework, scope and audit dates.

Scope
Confirm
Audit and Report

Pay the AUD 400 application fee to secure your place.

We conduct the audit and deliver a written report of our findings.

Frequently asked questions

Who is eligible?

Small and medium businesses implementing, or already certified to, ISO/IEC 27001 or ISO/IEC 42001, and organisations preparing for a SOC 2 examination. One complimentary engagement per organisation.

Will the internal audit count towards certification?

ISO/IEC 27001 and ISO/IEC 42001 require you to run internal audits (Clause 9.2). An internal audit conducted by a competent, impartial auditor can be used as evidence of that requirement, provided you act on the findings.

Can MIT Advisory certify us afterwards?

No. Certification is issued by an accredited certification body. To protect impartiality, we do not act as certification auditor for any organisation we have provided consulting or internal audit services to.

Why is there an application fee?

The AUD 400 fee secures your place in a limited program. It is payable once scope and dates are agreed, and it is non-refundable.

What happens after the audit?

You receive a written report. There is no obligation to engage us further. If you would like help closing the gaps, we can propose a separate scope of work.

Contact

Reach out for expert info security advice

Email

Phone

info@mit-advisory.com

02 9446 9809

0491 020 308

© 2026. All rights reserved.