A few weeks ago, Compleye helped its first international client, Xetova, start its compliance journey with the 5 Day Intensive program (5DI). It was an excellent opportunity for the Compleye team to make sure our lean compliance approach and methods adjusted to an international context. Despite the difference between European Read more…
At this point the Venture is already familiar with our Compleye Tool. Management Review – a formal document addressing all the 11 mandatory ISO27001 topics. We have collected evidence and now we align them to the right topics, and we draw up suggestions for improvements. Statement of Applicability (SoA)– this is an overview of all the Annex A (part of the ISO27001 norm), and we need Read more…
Topics to address for Business are: Business Continuity Plan (BCP) and GDPR Assessment and we report back the results of Tech topics. This will result in finishing the (security) Objectives. It is an important one; it will show if the Venture is able to define security KPIs other than to become ISO27001 Certified. Our goal is to define at least 2 other security objectives – so you can start Read more…
Supplier Assessment and Leadership & Management – 2 topics we will address from the Business Side. For Supplier Management we have designed a standard Procedure, selection, profile, onboarding assessment and the in-depth assessment procedure for medium and high risks suppliers. Supplier assessment is split between Business and Tech, depending on the profile of suppliers. And standard documentation for your Leadership & Management – with Read more…
HR, Operational overviews, Business Process – the topics we address with the CEO/COO and while writing it down we should address at the same time, that it does not matter how you are organized, how many people are working in your team. ISMS can be implemented with a team as small as 3 people and there Read more…
During the Intake – we have designed your first X-Ray – already created a structure, by introducing icons and using symbols for flows between hardware, stakeholders and components. However, it can still be a bit of a labyrinth – complexity depending on the phase the Venture is in. So from the X-Ray (labyrinth) we are going to organize the compliance Read more…
I see this time and time again: One only realizes the importance of compliance when that first big sought-after (corporate) customer knocks on the door and puts down his list of minimum requirements. The clash between the agile culture of the start-up and the bureaucratic mill of the corporate is Read more…
