Our ISO 27001 Certification Journey!

Developing robust security solutions involves a continuous commitment to refining products both functionally and in terms of security. Often, the multifaceted nature of security, encompassing secure processes and procedures across departments, including logical, physical, and administrative aspects, can be overlooked. In May 2023, this realization prompted us to initiate the ISO 27001 certification process.

While our team excelled in securing our products, there were identified gaps in the implementation of security measures across the organization. Understanding the vital need for integrating ISO 27001 across all company functions to ensure security and trust, we promptly engaged an ISMS auditor. This commenced a series of crucial steps, starting with a gap analysis and thorough documentation of processes, followed by dedicated security awareness sessions for the entire team.

For initiatives that impact every organizational process, strong cooperation from employees is paramount. Processes can’t exist in isolation; they require constant evaluation, optimization, and adoption by the responsible teams. We ensured open communication with the Codegic team throughout the process. The first internal audit revealed our shortcomings, providing valuable insights.

In August, our official audit comprised two parts: a meticulous review of our documentation, resulting in minor findings, and the subsequent functional audit. The Codegic team was well-prepared but understandably anxious about the final audit. With meticulous preparation and robust processes in place, they confidently addressed the auditor’s queries, showcasing their in-depth knowledge of security measures, rationale, and implementation.

Post-audit, we continued to refine our internal ISO 27001 practices while eagerly awaiting the final outcome. In October, an email from the auditing firm delivered the excellent news that we had successfully passed the ISO 27001 audit. This acknowledgment from a third party was a testament to our collective efforts. Finally, in November 2023, after a rigorous 7-month journey, we proudly received the official certification letter from RICI, marking our company as ISO 27001 certified!

Key Insights Gained

• Elevate security to the same priority level as functionality
• Foster transparency and collaboration within the team
• Embrace a culture of continuous review and improvement
• Team work is the key for sustainable growth!

What’s Next?

This certification marks a significant step forward, but our commitment to excellence doesn’t end here. We’re continuously evolving, innovating, and refining our security measures to ensure your information remains safeguarded at all times.

We’re immensely proud of this achievement, and it’s a reflection of our ongoing commitment to providing you with the most secure and reliable services possible.

Stay tuned as we continue to raise the bar and set new benchmarks in information security!