REGISTERED AUDIT FIRMS

Registered Audit Firms

The process of implementation of information / cyber security controls by Federal ministries/ divisions/ departments in compliance with the framework of guidelines and policies issued by NCERT/NTISB has been initiated by NCERT. This process requires engagement with firms who adopt methodologies and practices aligned with established standards of information security and industry best practices.

Upon assessment of documents in the light of the criteria for cyber security auditing firms registration published at PKCERT website, appropriate categories have been assigned to the firms listed below. These firms are available for the federal ministries for compliance audit. This should be noted that if one firm is engaged for the consultancy and internal compliance audit then for the external audit, if deemed necessary by NCERT or any regulator, the same firm shall not be engaged to avoid any conflict of interest.

Note: For Audit of Cloud services, following shall be mandatory:

1. Submission of affidavit declaring “NO Conflict of Interest” and terms of engagement as decided by MoITT.
2. ISO/IEC-17021Accreditation