Kenya Bureau of Standards (KEBS) conducted a blended (virtual and on-site) ISMS Recertification Audit from 19^th May to 28^th May 2021. Fourteen departments were sampled and audited. The audit objectives were to determine conformity of the University’s Information Security Management System with audit criteria, determine ability of management system to ensure the University meets applicable statutory, regulatory and contractual requirements and evaluate the system performance over the certification period. At the end of the audit it was the auditors’ conclusion that the University’s Information Security Management System meets the requirements of ISO/IEC 27001:2013 Standard. The auditors recommended UoEm recertification to ISO/IEC 27001:2013 for a period of three years from 2021 to 2024.

To renew the certification of the University to Quality Management System, the Kenya Bureau of Standards (KEBS) conducted blended audits (virtual and on-site) from 17^th December 2020 to 4^th February 2021. Eighteen departments were sampled and audited. The audit objectives were to determine conformity of the University’s Quality Management System with audit criteria, determine ability of management system to ensure the University meets applicable statutory, regulatory and contractual requirements and review the system over certification period. At the end of the audit the auditors concluded, based on their findings that the Quality Management System implemented in the University conforms to the requirement of the ISO 9001:2015 Standard. The auditors recommended recertification of UoEm to ISO 9001:2015 for a period of three years from 2021 to 2024.

The fourth combined ISO audits for ISO 9001:2015 (QMS) and ISO/IEC 27001:2013 (ISMS) were conducted on 8^th and 9^th June 2021. It targeted all the departments that were not sampled during the KEBS recertification audits. The objectives of the audits were to determine level of conformity of the implemented QMS to ISO 9001:2015 Standard and ISMS to ISO 27001:2013 Standard and to identify areas of improvement. Fifteen departments were sampled and audited on both systems. At the end of the audit it was concluded that, based on the samples taken during the audit that University of Embu has implemented the Quality Management System to a greater extent (82.32%) that meets the requirements of ISO 9001:2015 Standard, commitments in University QMS procedures and adherence to relevant legal and regulatory documents in its operations.

Further, on ISMS it the auditors’ conclusion that University of Embu has implemented the Information Security Management System to a greater extent (83.4%) that meets the requirements of ISO/IEC 27001:2013 Standard, ISMS procedures, ISMS policies, ISMS guidelines, risk registers and relevant legal and regulatory documents applicable in the University operations.