Accelerating CCT to ISO 27001 certification and beyond

The Challenge

As cutting-edge digital experts, CCT, knew that an ISO 27001-certified ISMS boosts much more than just information security.

Ronny Kvalvågnes, CTO at CCT Group, said: “We work with large, rapidly growing amounts of data. We wanted to implement a new ISMS to make sure we met client needs and complied with regulations like GDPR. And there are broader business benefits.”

“Having an ISO 27001 certification is a good way of continuously improving our organisation and how we manage information, and to make sure that we have all needed processes and procedures in place.”

Ronny Kvalvågnes Chief Technology Officer, CCT Group

Ronny’s team began by trying to build their own ISMS. But they quickly discovered that it can be a surprisingly complicated, time-consuming process. And many ISMS solutions only take you part of the way to certification.

“Initially we bought a framework and started to implement this in our current document solution. But we quickly realised that it missed some crucial parts in regards to change management, follow up etc.”

Ronny Kvalvågnes Chief Technology Officer, CCT Group

The Solution

CCT started looking around for an all-in-one-place ISMS solution that would guide them to certification and support them beyond it. Their ideal platform needed to help them apply the ISO 27001 standard and build on all the implementation work they’d already done. That very quickly led them to ISMS.online.

Ronny said: “After a demo we quickly decided that ISMS.online was perfect for us. It provided a lot of good examples and an easy to use interface, and was very flexible to suit our needs. And it gave us everything we needed for approval processes and automated reminders

“All in all we saved a lot of time implementing ISO 27001 by using ISMS.online.””

Ronny Kvalvågnes Chief Technology Officer, CCT Group

The Result

We helped Ronny and his team bring all the work they’d already done into our platform. Our Adopt / Adapt / Add content was ready and waiting for them. It starts all of our customers off with 77% of their ISMS documentation already completed.

“ISMS.online’s pre-made content and examples were very useful. They extended our understanding about the ISO 27001 standard.”

Ronny Kvalvågnes Chief Technology Officer, CCT Group

With the help of our support teams, they were quickly ready for their second internal audit. They asked us to carry it out for them. It was during the 2021 Covid-19 lockdown, so it had to be a remote audit.

Our feedback from our ISO 27001 experts helped Ronny and his team fine tune their ISMS, ready for their final ISO 27001 audit which they passed and were awarded ISO 27001 certification.

“Your support and consultant services are great. Having a sparring partner with a lot of knowledge is extremely valuable to any company going through these processes.”

Ronny Kvalvågnes Chief Technology Officer, CCT Group

What’s Next?

Ronny and his team love the flexibility and ease of use of our platform. It’s helping them build on their ISO 27001 achievements by going for other standards.

“We’ve decided to extend the platform to also include ISO 27701 and ISO 22301, maybe getting certified for them as well. That will further strengthen our focus on privacy and GDPR compliance, and also our business continuity planning across the organisation.”

Ronny Kvalvågnes Chief Technology Officer, CCT Group

Our platform’s opened up new possibilities for CCT, just like it does for all our customers. We’re very pleased and proud to accompany them on that journey.