Readiness starting October, audit window in January. Legal tech, so privilege and client confidentiality complicate the usual playbook.
2 answers
Ordered by company acknowledgement, relevant experience and helpfulness. Not by likes.
Pick the auditor before the readiness partner, and make them talk to each other before you sign either. Readiness work built against the wrong auditor's evidence expectations gets redone. Ask any candidate firm for the last legal-tech client they took through, and call that client.
Scope ruthlessly. Your first report should cover the production system your customers touch and nothing else. Every system you add roughly doubles evidence collection, and no buyer has ever asked us why the marketing site was out of scope.
Share your experience
Have a question like this?
Questions are a company-only object. Claim your company room and ask the people who have already made the move you are about to make.
Claim your company room