Impact Story

Global SaaS provider: ISO 27001 certified in four months

Netlight led a global SaaS provider to ISO 27001 certification within a tight four-month deadline. We implemented 93 tailored security controls and a robust risk management framework, and set the client up for audit readiness and ongoing governance.

Client:Global SaaS provider

Industry:Cybersecurity

Technology:ISO 27001, Risk management, Information security governance

Impact Story

Global SaaS provider: ISO 27001 certified in four months

Client:Global SaaS provider

Industry:Cybersecurity

Technology:ISO 27001, Risk management, Information security governance

MONTHS TO CERTIFICATION

From project start to ISO 27001 certification, within a tight deadline set by the client.

SECURITY CONTROLS

Tailored security controls implemented to match the client's operations and certification needs.

Challenge

Gaps that put contracts at risk

Only a small subset of the key certification requirements had been implemented. Critical areas of information security risk management, including risk assessment, incident response, supplier management and secure coding, were missing. Without a targeted approach, the client risked falling short of upcoming contract requirements and jeopardising major business opportunities.

Solution

A four-phase path to certification

Netlight took leadership of a tailored project in four phases: Planning, with a gap analysis to prioritise remediation; Documentation Development, with the policies, procedures and records certification requires; Control Implementation, with the technical and organisational measures in place; and Audit Readiness, ensuring internal practices met the requirements. A core deliverable was a company-wide risk management and governance framework, built around the risks specific to the client's operations.

Impact

Certified in four months

The client successfully obtained ISO 27001 certification within the four-month deadline, significantly enhancing their market credibility and client trust.
93 tailored security controls were implemented, aligning the client’s security framework to their unique operational needs.
A sustainable governance structure was established, enabling ongoing compliance and proactive risk management for future growth.

About the client

The client, a global SaaS provider, faced a mission-critical challenge: achieving ISO 27001 certification within an ambitious four-month deadline.

Next up

We don't predict the future.

We build it with the right people.

Impact Story

Global SaaS provider: ISO 27001 certified in four months

Impact Story

Global SaaS provider: ISO 27001 certified in four months

MONTHS TO CERTIFICATION

SECURITY CONTROLS

Gaps that put contracts at risk

A four-phase path to certification

Certified in four months

About the client

We don't predict the future.

MONTHS TO CERTIFICATION

SECURITY CONTROLS

Gaps that put contracts at risk

A four-phase path to certification

Certified in four months

About the client

We don't predict the future.

From regulatory pressure to strategic advantage: Turning DORA Compliance into operational strength

From regulatory pressure to strategic advantage: Turning DORA Compliance into operational strength

Protecting critical infrastructure: implementing NIS 2 to secure Europe’s green energy future

Protecting critical infrastructure: implementing NIS 2 to secure Europe’s green energy future

When security becomes the gateway to innovation: transforming access management in healthcare

When security becomes the gateway to innovation: transforming access management in healthcare