Mohammed Abdul-Fatawu holds an Executive Master of Business Administration in Governance, Risk and Compliance (GRC) from PECB University, an MA in Strategy from University of Ghana, and a Master of Business Administration in Design and Innovation from Anglia Ruskin University. Beyond his academic qualifications, he is a Certified Senior Lead Auditor in multiple management systems, including ISO/IEC 27001, ISO/IEC 20000-1, ISO 42001, ISO 22301, ISO 45001, ISO 9001, ISO 14001, ISO 37001, and ISO 37301.
Professional Experience
Mohammed Abdul-Fatawu is a consummate banker and risk management professional with extensive experience in organizational resilience, digital transformation, and a strong, results-oriented approach to work. He is a certified management systems auditor, certified NIST cybersecurity consultant, certified AI professional, and a PECB-certified Platinum Trainer with over 18 years of combined experience in banking, project management, enterprise risk management, cybersecurity and information security, organizational resilience, and business continuity management.
His extensive experience is derived from both professional practice and a strong commitment to staying abreast of industry standards. He is certified in over sixty (60) global standards, including ISO 22301, ISO 9001, ISO 14001, ISO 37001, ISO 31000, ISO 38500, ISO 27001, ISO 27002, ISO 27005, ISO 21502, ISO 37301, ISO 42001, and ISO 20000-1, among others.
His academic background, together with these professional certifications, demonstrates a strong commitment to staying up to date with industry best practices and a dedication to continuous professional development.
Mohammed Abdul-Fatawu experience in auditing
Throughout my professional career, I have spearheaded key initiatives at GCB Bank PLC that led to the successful implementation and certification of the organization against ISO 22301:2019. I also provided strategic guidance as part of a team that successfully implemented ISO/IEC 27001:2013 and ISO/IEC 27001:2022. Additionally, I have consulted for several technology-oriented organizations and fintechs in implementing and achieving certification against ISO/IEC 27001 and ISO 22301 standards. As a certified MSECB Management Systems Auditor for ISO/IEC 27001:2022, ISO 22301, ISO 9001, ISO 14001, ISO 45001, ISO 20000-1, and ISO 42001, I have successfully conducted and completed certification audits for numerous high-level IT companies, fintechs, banks, and public sector organizations on behalf of MSECB. I have also led and conducted numerous first- and second-party audits and am recognized as a certified PECB Platinum Trainer for more than twenty ISO courses. Furthermore, I serve as a Senior Lead Trainer for several international training organizations, where I delivered over 100 training sessions across various ISO courses between 2024 and 2025.
During an ISO 27001:2022 surveillance audit for a Fintech, I discovered that several access control records for critical systems were incomplete. The IT Head explained that a recent system migration had caused data inconsistencies, and that not all user access reviews were traceable in the new system.
I first sought clarification by interviewing both the IT Head and system administrator to understand the migration process and the controls in place during the transition. I reviewed backup records, changed management records, and system logs to establish if there was compensating evidence of user access review. To avoid conflict, I communicated my concern factually, linking it to the ISO 27001 control (A.9.2.5 – Review of user access rights), and explained that the lack of traceable evidence constituted a potential nonconformity. I encouraged the client to focus on the root cause and consider appropriate corrective actions rather than seeing it as a fault. The client appreciated my approach, and the issue was considered a minor non-conformity. It was subsequently addressed through improved migration documentation and strengthened access review traceability.
The aspect of auditing I enjoy the most is the analytical and problem-solving component, where I get to evaluate how well an organization’s controls and processes align with its objectives and risk appetite. I find it particularly rewarding to look beyond checklists and truly appreciate how different parts of the management system work together to build overall resilience and continuity.
My professional goals as an auditor are centered on advancing excellence, integrity, and resilience in organizations. I aim to continue enhancing my auditing competence across multiple management system standards particularly in the following areas:
ISO 22301 (Business Continuity Management)
ISO 27001 (Information Security Management)
ISO 42001 (AI Management Systems)
ISO 9001 (Quality Management)
ISO 20000-1 (Service Management)
ISO 45001 (Occupational Health and Safety Management)
ISO 14001 (Environmental Management)
ISO 37001 (Anti Bribery Management)
ISO 37301 (Compliance Management)
My goal as an auditor is to move beyond compliance and ensure organizations strengthen their governance, risk, and resilience frameworks. I aspire to be recognized as a trusted lead auditor who drives continuous improvement, supports business continuity, and builds organizational confidence in the face of uncertainty.
Mohammed Abdul-Fatawu experience with MSECB
MSECB’s strong global reputation for credibility, professionalism, and commitment to quality in management system certification was a key factor in my decision to associate with organization. I was particularly drawn to how MSECB’s emphasis on integrity, impartiality, and competence, values that align closely with my own approach in the field of auditing.
I also appreciate MSECB’s emphasis on value-added auditing, where the goal is not only to assess conformity but also to ensure organizations strengthen their management systems and achieve continual improvement. The organization’s broad portfolio from ISO 9001, 27001, and 22301 to emerging frameworks like ISO 42001 reflect its forward-thinking approach and commitment to evolving global standards.
So far, my experience with MSECB has been very positive. The professionalism and responsiveness of the coordination and technical teams make every audit well-supported. I have found the management system audit process intuitive, the reporting framework well structured, and the collaboration with peers highly enriching. Each engagement reinforces my belief that MSECB maintains the highest standards of audit integrity and technical excellence.
In my opinion, what truly sets MSECB apart from other certification bodies is its commitment to quality, impartiality, and value creation throughout the audit and certification processes. MSECB emphasizes value-added auditing, ensuring that each audit helps organizations understand their risks, strengthen their controls, and improve their management systems. This practical, improvement-driven approach resonates deeply with me as an auditor who believes in promoting resilience and sustainable performance.
Another key differentiator is MSECB’s operational excellence and auditor support system. The organization provides clear guidance, timely coordination, and efficient reporting tools through MSECB ERP platform making the entire audit process seamless and professional. Additionally, MSECB’s global recognition and partnership with international accreditation bodies give it a unique advantage of combining technical rigor with international credibility.
Its ability to adapt quickly to emerging standards such as ISO 42001 (AI Management) as well as evolving frameworks in cybersecurity and business continuity, further demonstrates its forward-thinking mindset. Overall, MSECB stands out for its integrity, professionalism, and dedication to continual improvement not just for clients, but for auditors as well.
MSECB offers a professional, supportive, and integrity-driven environment. Its value-added audit approach, global recognition, and commitment to continual improvement make it a great place for auditors who aspire to grow professionally and make a meaningful impact.
Build endless connections and professional networks by joining our team of over 500 MSECB Auditors.
We welcome you on board!
