Vital take aways from using ISO27001 in SMEs
These experiences from the use of ISO27001 in SMEs show how small corporations can successfully achieve the ISO27001 certificate
Experience reports
Here we share the experiences of our project teams and business customers. Every subject area is not easy to understand. When a company decides on a specific certification or a safety-related measure, various influencing factors have an impact on the way to achieving the goal.
What experiences have our customers had on their way to certification? What lessons have the companies before them learned from this?
ISO 27001 certification is heavily promoted in this context of information security and NIS 2.0. As a decision-maker, find out whether this is actually a sensible preparation for the increasing threat situation. A consideration of meaningfulness is not limited to ISO 27552 or other subcategories of the ISO 27000 family.
If the audit is successfully completed, the organization receives its ISO 27001 certificate. But what comes next? The continued existence of the ISO 27001 certificate is linked to several criteria. You have to endure a surveillance audit every year. In addition, your company must provide evidence that it is actually implementing measures for the purpose of information security.