Dan Levy

COO

CadDo delivers knowledge-led decision intelligence solutions to help innovative Finance, Supply Chain and Sustainability leaders visibly improve business outcomes. CadDo’s team of data strategists bring operational, process, and organizational expertise, which in combination with our advanced modeling technology leads to more accurate and informed decision-making.

Founded: Founded in 2019
Target customer: 
B2B

The team at CadDo is committed to ensuring they handle their client data responsibly. They knew that achieving ISO 27001 certification would help internally and give them the formal accreditation that many B2B organisations look for today.

CadDo achieves ISO 27001

Dan Levy explains the reasons the team at CadDo decided to start their ISO 27001 journey to certification, and why they chose Evalian to support them in doing so:

“When we went through the process of picking a vendor, we spoke to several out there, and I wanted to be able to engage with a partner that would be able to help me deliver a solution in a really pragmatic and sensible way for what we needed. And that’s what we found in Evalian. CadDo is a software and consultancy business. We focus our software on giving our clients a better understanding of their profitability and their sustainability. And our approach is to develop software that can be used by analysts in the business or by our consulting team rather than IT specialists.

We deal with our customers’ data. So ISO 27001 is a key standard to be able to guarantee that you have security around your information asset management. Without ISO 27001, it’s very hard for our clients to be sure that when they hand data over to us, we’re gonna handle that in a controlled and a secure way. So it’s absolutely critical that our certificate is valid and meaningful to people. So ensuring that it is provided by a UKAS-accredited organisation, which is how we were driven to Evalian, is absolutely key, otherwise, the certificate is not really worth the paper it’s written on.

From day one with Evalian, the key process for us was to take us on the ISO 27001 journey and to explain what we’re really doing and actually to put all those processes in place for us. But fundamentally, they produced the documentation that was in an ISO standard that was needed for us, shared that with us, and that got us to the first point of having a clear setup. They then undertook internal audits for us and helped prepare us for the actual external audit to enable us to pass nice and easily. The external audit went through very cleanly, we got no findings at all.

And by the process that Evalian took to help us start to put certain processes that weren’t perfect in place earlier rather than later, it gave us the ability to have that history once we got to the audit. I think Evalian has been great to work with. It’s been very, very easy. We’ve got through the process really without any problems at all, and I couldn’t recommend them more.”

Need support with ISO 27001?

Whether you’re already embracing cutting-edge technologies or working with traditional data systems, integrating ISO 27001 into your operations is essential. It ensures that security becomes a natural part of your business, woven into every process and decision.

Want to understand more about the benefits of certifying to the standard? Joe Allsopp discusses the business benefits of ISO 27001 in our latest video. 

If you’re considering how to take this step or enhance your current security measures, our team of Evalian ISO consultants is here to support you with affordable ISO solutions. We can help you navigate the complexities, ensuring your business stays both innovative and secure. Already certified to ISO 27001:2013? You need to ensure you upgrade to the new ISO 27001:2022 standard by October 2025. We can help you achieve this in as little as 4 days, depending on the complexities of your systems and operations. 

View our ISO consultancy solutions. 

Ready to get started with ISO 27001? Contact us now

icon

Talk To Us:

If you’ve had a data breach, are confused about DPOs, or would like to discuss penetration testing or cyber incident response training, please give us a call or email us. We promise no hard sell and only real-world guidance.

We love to talk privacy and security and we’d be delighted to discuss your requirements. If we can’t help for any reason, we’ll probably know someone who can.

Get In Touch