Auditor for digital records of taxi dispatch centres

Role of the auditor

The auditor shall conduct an audit of the electronic records of taxi dispatch centres, with particular emphasis on:

• data security and quality

• the registration, transmission and storage of data in digital systems

• real-time access for supervisory authorities to relevant information

• compliance of systems with requirements on data protection, encryption and access control

• the reliability of electronic records of completed trips, including satellite data, pricing information, and the identification of vehicles and licence holders

The auditor shall prepare a report on the audit and submit it to the Icelandic Transport Authority.

Qualification requirements

Applicants must meet the following requirements:

• operate a management system in the field of quality and/or information security in accordance with recognised international standards

• comply with one of the following standards, or equivalent requirements:

  • ISO 27001 for information security management

  • ISO 9001 for quality management

• be independent of and impartial towards the entities being audited, meaning that the auditor must not have:

  • developed or operated the system under review

  • provided regular consultancy services to the taxi dispatch centre being audited

  • financial interests connected to the audited entity

  • been involved in the design of the system

• have experience in similar audits of software or information systems, particularly where requirements relate to security, quality and the handling of sensitive data

• conduct audits in accordance with recognised methodologies for auditing information systems and information security

• be able to demonstrate experience in conducting comparable audits, either through:

  • a specified number of audits, or

  • equivalent professional experience deemed sufficient by the Icelandic Transport Authority

• have knowledge of comparable systems managing digital data, including:

  • satellite data

  • real-time data transmission

  • access control for authorities and consumers

• know requirements relating to data protection and privacy

Costs and supervision

• Taxi dispatch centres are responsible for covering the costs of the annual audits.

• The Icelandic Transport Authority oversees the quality and outcomes of the audits.

• The Icelandic Transport Authority may require an additional audit if deemed necessary.

If significant deficiencies are identified that may affect the safety of taxi services, the Authority may require the dispatch centre to bear the cost of such an additional audit.

Application
Applications must include:

• information on the applicant’s experience of similar audits

• examples of relevant projects completed by the applicant

• a description of expertise and methodologies used in auditing digital systems

• confirmation of the applicant’s impartiality

The Icelandic Transport Authority will review applications and approve those applicants who meet the above requirements.

Please submit applications to: samgongustofa@samgongustofa.is.