Auditi
How Security Consultants supports Auditi and Vispato with vCISO guidance, risk assessments, audit preparation, and ongoing ISO 27001 management.
The challenge
Auditi provides software for auditors, while Vispato provides a whistleblowing platform. Their leadership coordinated information-security work across both businesses, with audit preparation that had to account for each company's services and records.
The work extended beyond an initial certification project. Maintaining an information security management system required recurring risk assessments, management oversight, evidence preparation, and practical reviews of continuity and recovery arrangements.
Security Consultants provided ongoing vCISO and audit-preparation support, working directly with management on these responsibilities.
The solution
Risk assessment and management oversight
Security Consultants worked with leadership on risk assessment and management review. Attila Horvath, our principal consultant, participated in risk assessments with the CEO, with separate assessment records maintained for Auditi and Vispato.
Management reviews brought together our vCISO and the companies' senior leadership to consider the information security management system. This work connected the assessment of risk with management oversight across the two businesses.
Preparing and presenting audit evidence
Our team coordinated an internal-audit evidence session with the client, reviewing the records and processes the auditor needed to examine. The work connected documented policies and risk assessments with evidence of how the organization operated.
During Auditi's March 2026 internal audit, Security Consultants worked alongside the client to present live evidence and walk the auditor through security processes. Our participation included demonstrating process flows and helping explain the practices behind the documentation.
That hands-on involvement gave the client support during the examination itself as well as in preparation. It provided continuity between the ongoing vCISO work and the evidence the auditor reviewed.
Exercising continuity and recovery plans
The engagement also included business-continuity and disaster-recovery tabletop exercises with management. These discussion-based exercises considered disruption scenarios and the responsibilities involved in responding and recovering.
Security Consultants' vCISO led the exercises with client participation. Management walked through its plans and considered the practical implications of a disruption, including the coordination needed to maintain operations and recover services. The exercises formed part of the wider security-management program.
The result
TÜV NORD issued Auditi an ISO/IEC 27001:2022 certificate on April 16, 2026, covering the design, development, and operation of its SaaS platform, including supporting processes. The certificate states a validity period of June 9, 2026 through June 8, 2029 and records initial certification in 2023.
Security Consultants supported the work behind that continuing security-management program through risk assessment, management reviews, audit-evidence preparation, and continuity and recovery exercises. The independent certification body assessed conformity and made the certification decision.
The engagement illustrates how ongoing vCISO support can connect management decisions, operational evidence, and audit preparation across related businesses. Christian Buerger, Auditi's Founder and CEO, describes his experience with our principal consultant in the testimonial below.
Building or maintaining an information security management system? Explore our ISO 27001 consulting service to discuss implementation, audit preparation, and ongoing support.
"Attila delivered outstanding work, guiding us through the entire process of achieving our ISO 27001 certification for two companies. His expertise, attention to detail, and commitment were evident at every step. He provided clear, actionable advice, ensuring we met all requirements with confidence. Highly recommended for anyone seeking top-notch support in cybersecurity and compliance. 10/10!"
