Beryl achieves ISO 27001 certification without expensive consultants and toolkits

Beryl is a British urban cycling brand, a supplier of laser lights for the TFL Cycle Hire Scheme in London and many other major cities around the world. Beryl also operate dockless cycle schemes in several UK locations. As the business stores personal data acquired from customers using local bike share schemes, they wanted to demonstrate to customers and local government partners that they are committed to data privacy and security.

Beryl Bikes began exploring technology solutions which would enable the process of achieving ISO 27001 certification, and more broadly demonstrate their ability to be GDPR compliant.

Having had experience of working with an Information Governance Toolkit while working with the NHS, the recently appointed Head of Technology at Beryl, Sacha Manson-Smith, specifically wanted a solution to support the organisation’s journey towards ISO 27001 that required minimal time to be spent on coordinating, building and implementing an Information Security Management System (ISMS).Whilst researching solutions, Sacha was also exploring the option of recruiting Information Security Specialists to support him and the team in the process of working towards ISO 27001.

After weighing up the costs and benefits of recruitment, buying a toolkit or using a platform, ISMS.online was selected with the add-on of the Virtual Coach which provides instant access to videos, templates and checklists to guide the team through their ISO 27001 implementation.

Sacha’s team quickly got to grips with ISMS.online, finding the interface easy to navigate and the Virtual Coach invaluable for guidance on where to take action. They also found the Policy Packs framework perfect for managing and distributing HR for the company.

The Beryl team now have all the support they need.

The platform provides a lot of the specialist knowledge and competence that would otherwise have to be resourced – enabling information security management to be ingrained in the organisation rather than simply a tick-box exercise.