We are a team of 1 developer and 1 sales/marketing and are fully certified. You can hire an external auditor for the internal audit. We have AI code reviews, so we don’t need an extra developer.
> We have AI code reviews, so we don’t need an extra developer.
You can streamline this and remove the developer as well and then of course you can streamline this even further and remove the sales/marketing person and just have AI run it all :)