ISO/IEC 27001 Certification for a Global SaaS
Certified at the first attempt with zero major nonconformities.
Client name withheld by agreement- Client
- B2B collaboration software
- Region
- U.S., UK and Singapore
- Year
- 2023
- Duration
- 20 weeks
- Scope
- 3 regions · 600 employees
- Practice
- AI, Cloud & Digital Trust
The challenge
What was at stake.
A collaboration software company operating in the U.S., UK and Singapore needed ISO/IEC 27001 certification to win European enterprise customers. It had never run a formal management system.
Leadership wanted certification at the first attempt, without slowing a 600-person company down.
What we did
The approach, step by step.
- 01
Context and scope
Scope, interested parties and risk method defined around the product customers buy.
- 02
Risk-led controls
A risk assessment and Statement of Applicability that justified every Annex A control choice.
- 03
ISMS that runs itself
Internal audit, management review and metrics built into existing operating rhythms.
- 04
Certification support
Stage 1 and Stage 2 preparation with the accredited certification body.
Outcomes
What changed, in numbers.
- 0
- major nonconformities
- 3
- regions in one certificate scope
- 20
- weeks to certification readiness
- 1st
- attempt certification
We were certified first time, and the management system actually helps us run the business.
Services delivered
Related engagements
More work in AI, Cloud & Digital Trust.
-
Austin, Texas · 14 weeks
AI, Cloud & Digital Trust · 2024SOC 2 Type II Readiness for an HR PlatformA clean Type II report on the first audit window, and enterprise deals unblocked the same quarter.
-
U.S. and EU · 20 weeks
AI, Cloud & Digital Trust · 2025 · OngoingAI Governance and Red Teaming for a GenAI PlatformAn AI management system built for certification, and 31 jailbreak paths closed before launch.
-
Texas and Oklahoma · 26 weeks
AI, Cloud & Digital Trust · 2024Secure Cloud Landing Zone for a Health NetworkGuardrails in code across every account, with critical misconfigurations down 92% in two quarters.
Let’s talk about your version of this.
Share what you are up against. A senior practitioner who has delivered this kind of work will reply within one business day.