What challenges were you and your team experiencing prior to working with us – what prompted you to seek a solution? We are an early-stage company with a team of 20. Due to the complex nature of our product and the high expectation from our clients, it was important to be ISO27001 certified as most of our clients require this as part of the supplier policy. Having the ISO certification gives our clients peace of mind that we are a well-managed business in all the dimensions that ISO 27001 covers. We managed most of the preparation ourselves with good support from Evalian who is accomplished and has expertise in ISO standards and security.
How did you go about searching for the solution and services? We sought quotes from several different companies after a thorough search offline and online, we decided what we wanted to achieve and set a deadline.
Please describe the reasons you decided to work with us. After our initial talks with the team at Evalian®, we felt they had the expertise to guide us in the right direction and help us to achieve that certification. We felt confident in their open and practical approach. Their proven track record was an additional level of comfort in the decision.
Did you have any expectations going into the process? We had a limited view of what to expect but Evalian® put us at ease with clear steps to guide us towards a successful certification.
Can you describe the process we took your business through and anything you learnt about your own business through working this way? We learnt a lot through the process, particularly about where security threats may lie. Evalian® assisted us in implementing several controls and policies. The team is now much more aware of the various risks. We have a much broader understanding of what is required to maintain the highest level of information security.
Were there any challenges you found along the way and how did you feel we or your consultant, helped to support you through that? Our main concern was if we would be able to have the resources and time to achieve what was expected, by the audit/certification deadline. Our Evalian® consultants were very confident and supported us well, ensuring everyone was on the same page, we achieved certification successfully and on time.
What changes did you make as a result of working with us? We have implemented more policies and procedures – which has given the company a lot more structure. We have a much better understanding of the importance of our information and the information we share with our clients and vendors. We are very self-aware and can identify when we need to undertake risk assessments and internal audits to ensure we maintain our certification.
What has been the most significant achievement for your business facilitated by using our services? We are more confident as a business that we have the necessary policies and protection mechanisms in place to deliver to our clients’ high expectations.
What impact has the results from working with us had on your clients/stakeholders? It instils confidence in our services from our clients’ perspective where trust is paramount and priceless.
What do you hope to achieve in your future working relationship with us? For example, continuing the current service or using additional services? We are happy with the service Evalian® has provided. The post-certification service has been good as the team continues to make themselves accessible to us for any questions we have. We hope to continue to use Evalian® for internal auditing guidance and would highly recommend Evalian® to any company seeking the ISO 27001 certification.