The One aspect you cannot do your self may be the certification audit, which have to be carried out by an external accredited body. In-house interior audit: When you've got skilled inner auditors on employees, the cost is mainly staff time. The inner audit for a small ISMS scope normally waiting for link from Web 2.0 Profiles (2)