Through interviews with our client’s management team, our audit team designed a set of manuals as the information system management system. The manual was amended and issued along with a set of policies, procedures and guidelines on ISO27001 standard for our client in different area to reduce the security risks. Our audit team also performed onsite checking for the implementations part of the audit, aiming not only at to prepare our client environment technically, but also providing solid experience for our clients in facing certification body auditors upon the real trail of certification.