Identity Verification Protocol Template for Perth Firm Principals: An ISO 27001-Aligned Client ID Process Your Team Can Actually Run

You are the principal. You are accountable when a client’s identity is impersonated, funds move to the wrong account, or a file is opened in someone else’s name. Your team already does ID checks — but the process lives in heads, not on paper, and every staff member does it slightly differently. The Identity Verification Protocol Template gives you a written, ISO 27001-aligned procedure your team can follow on every new client, every time, with the evidence trail to match.

Why it matters now

ISO/IEC 27001:2022 is the international standard for information security management systems (ISMS). It requires organisations to identify information security risks, implement controls to address them, and maintain documented procedures that demonstrate those controls are operating. Client identity verification is one of the most foundational of those controls for a professional services firm: it is the first point at which an impersonator can be detected, and the first point at which a regulator, insurer, or court will ask “what was your process?” Identity theft targeting Australian professional services clients is a recognised threat class — the Australian Competition and Consumer Commission tracks it through Scamwatch (https://www.scamwatch.gov.au/) and the Australian Cyber Security Centre publishes general guidance at https://www.cyber.gov.au/. ISO/IEC 27001:2022 sets the standard against which a defensible verification procedure is measured.

The 5-minute view

ISO/IEC 27001:2022 requires organisations to establish, implement, maintain and continually improve an information security management system covering people, policies and technology
The standard requires documented procedures — a verification process that exists only in staff knowledge does not meet the documentation requirement
Client identity verification is a control that addresses confidentiality and integrity of client data and reduces the risk of impersonation-driven fraud on a file
Common failure points in firm identity processes: inconsistent acceptance of ID types, no second-channel verification, no record of who verified, no record of what was sighted, and no escalation path when something looks wrong
An ISO 27001-aligned procedure documents the steps, the evidence captured, the staff member responsible, and the escalation trigger — making the control auditable
The template is a starting procedure designed to be adopted and adapted, not a substitute for an ISMS or for legal advice on AML/CTF obligations where they apply

What DRMO does about it

The Identity Verification Protocol Template is a productised L1 deliverable: a documented client identity verification procedure structured against the ISO/IEC 27001:2022 requirements for documented information and operational controls. It covers the verification steps for a new client (individual and corporate), the ID evidence to capture, the second-channel verification check, the staff sign-off record, the escalation trigger when an ID anomaly is detected, and the retention requirement for the verification record. A short walkthrough document explains how to adopt the template into your firm’s existing onboarding workflow and which sections to adapt to your firm’s matter types. This is the same procedure structure used as the baseline in the DRMO Identity Verification Protocol service package, made available as a self-serve template without a discovery call.

The deliverable

PDF template document — editable client identity verification procedure (approximately 12-15 pages) covering individual and corporate clients
Walkthrough document — adoption guide explaining each section and where to adapt to your firm’s specific matter types
Verification record template — the per-client evidence form your staff complete and retain
Escalation checklist — when to stop the onboarding and refer to the principal
Delivered via email immediately on payment

CTA

Buy the Identity Verification Protocol Template — AUD $149

A self-serve productised template. No discovery call required. Suitable for Perth firm principals who need a written, ISO 27001-aligned client ID procedure to replace an undocumented or inconsistent process. The template is operational support for your firm’s identity verification workflow; it is not legal advice on the firm’s AML/CTF or regulatory obligations.

Sources

International Organization for Standardization — ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements: https://www.iso.org/standard/27001
Australian Cyber Security Centre — general information security guidance: https://www.cyber.gov.au/
Australian Competition and Consumer Commission — Scamwatch (identity theft category): https://www.scamwatch.gov.au/

DRMO capability references:

Identity Verification Protocol Template (L1 service shape, surface area matrix)
Identity Verification Protocol (baseline procedure used in DRMO service packages)