No. Accredited Bodies are strictly forbidden from auditing an ISMS they served apply. You should use an independent third party to the audit to make sure the certificate is valid. One of ISO 27001’s demands is Manage aim A12.6: Technological Vulnerability Management. It states that providers have to be proactive https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits