Certification process

1) Definition of the contract

• Request for an offer from the client interested in certification
• Obtaining all the necessary information for certification and issuing the offer from “e-Cert” shpk
• Acceptance of the offer by the customer

2) Preliminary audit (At the client’s request, not mandatory)

• Analysis of any gaps and assessment of current ISMS compliance with regulatory requirements

3) Initial audit

• Verification aimed at assessing the implementation of the principles and structure of the Management System (applicable legislation and regulations, security policy, risk analysis, clear and consistent definition of purpose, risk treatment plan)

4) Certification audit

• The purpose of verification is to assess the adequate and effective implementation of the Management System, through techniques that include the analysis of documents, observations, interviews with personnel.
• This verification is aimed at issuing the certificate

5) Supervision audit

• Audit conducted annually after certification, to check continuous improvement

6) Certification renewal audit

1. The Renewal Audit is carried out after three years after a full verification or continuous assessment over time