Forensic Medicine Department, Sultanah Aminah Hospital

Ask for named certifications on letterhead — ISO 27001 for the practice, CREST for the people doing the testing — then verify the certificate number with the issuing body rather than with the company quoting you.

This applies to cybersecurity and security auditing as a category. It is not a statement about this company — we hold a name, an address, tags and a Google rating, and nothing more can honestly be said from that.