Shortage of ISO 27001 knowledge and capacity

TCSNL was struggling with a shortage of capacity and in-depth knowledge of the ISO 27001-standard. “Preparing for the audit was a complex task that required both specialist knowledge and manpower,” says Stefan Evers, Managing Director. “Unfortunately, our own Security Officer was unable to bear this extra burden.” What's more, ISO 27001 goes beyond cybersecurity alone. It includes optimizing all business processes with information security as a central theme. This requires support throughout the organization and therefore a broader approach than purely technical measures.

The role of an external colleague

Fendix took the role of implementation partner in itself. As a result, Jelle started his job and, as an external colleague, worked closely with the TCSNL team to integrate the necessary knowledge and optimize business processes, with information security as a key point. In addition to working with management to get their support, we also explained why information security is so important to the entire organization.

‍

For employees, it often seems like a long way from my bed show. Everyone works with certain systems or wants insight into certain documents, and then suddenly a specialist comes and makes rules for this. Jelle van Fendix set out the lines perfectly and communicated clearly, so that employees increasingly got a sense of the subject and became involved. Jelle did this by looking for information from the right responsible people, sitting around the table, making sure you receive the right information, setting deadlines, and staying in touch.