Alignment & Show time

At this point the Venture is already familiar with our Compleye Tool.  Management Review – a formal document addressing all the 11 mandatory ISO27001 topics. We have collected evidence and now we align them to the right topics, and we draw up suggestions for improvements.   Statement of Applicability (SoA)– this is an overview of all the Annex A (part of the ISO27001 norm), and we need Read more…

Verify & Validate

Topics to address for Business are: Business Continuity Plan (BCP) and GDPR Assessment and we report back the results of Tech topics. This will result in finishing the (security) Objectives. It is an important one; it will show if the Venture is able to define security KPIs other than to become ISO27001 Certified. Our goal is to define at least 2 other security objectives – so you can start Read more…

Push and Pull of the policies

Supplier Assessment and Leadership & Management – 2 topics we will address from the Business Side. For Supplier Management we have designed a standard Procedure, selection, profile, onboarding assessment and the in-depth assessment procedure for medium and high risks suppliers. Supplier assessment is split between Business and Tech, depending on the profile of suppliers. And standard documentation for your Leadership & Management – with Read more…

From Complex to Compleye

During the Intake – we have designed your first X-Ray – already created a structure, by introducing icons and using symbols for flows between hardware, stakeholders and components. However, it can still be a bit of a labyrinth – complexity depending on the phase the Venture is in. So from the X-Ray (labyrinth) we are going to organize the compliance Read more…