Why did we do it?

ADL Consulting have done what surprisingly few ISO consultancy practices do and achieved the ISO 27001:2022 certification for ourselves.

We did it because we believed we should practice what we preach.

ISO 27001 is no small undertaking and, having helped numerous clients to achieve the requirements of this exacting Standard, we felt it was only right to pass the certification for ourselves.

How long did it take?

Well, not that long because we're a boutique agency and it's our specialty! That said, auditors can only audit evidence, so it takes a little while to build the evidence that will satisfy an audit.

Was it hard?

Yup! Even for us, it wasn't a walk in the park!

ISO 27001 is a large system with far reaching implications across the whole business. Ensuring that we'd dotted all the i's and crossed all the t's was no small task.

Further, there were elements of our processes that, during the implementation, we decided could and should be done better.

...and right there is the strength of ISO 27001 and it's foundational concept of continual improvement. The "lather, rinse, repeat" concept means that we review processes, controls, policies - every element of the business looking for areas that we can improve.

This is, of course, a moveable feast! What is right today may not be tomorrow, so regular review is baked into the implementation process and ongoing Management Reviews to ensure that the right controls are in place, and that the business operates as efficiently as possible.

Anything else?

Nope, that all we wanted to say!

Of course, if you'd like help in achieving ISO 27001 for yourself, we'd be happy to help. Our ISO 27001 consultants would love to discuss your project with you, so please get in touch!