Creating a fully Integrated Management System with ISO 9001:2015 and ISO 27001:2013 for a technology company based in Bromley, Kent

“AvISO has been outstanding at every step of our journey. They were quick to understand our business and our needs. They have helped us to implement an integrated quality management process and supported us all the way through our certification of ISO 27001 and ISO 9001. The toolbox is simply brilliant, and Oliver has been really helpful and patient, giving me a lot of knowledge in the ISO standard and helping me at every step with our process and how to embed this culturally into our company. I couldn’t be more satisfied with their work.”

ISO 9001

“Bromcom already had an information security management system (ISO 27001), so the structure was there. It was an interesting job as most of the work starts with the ISO 9001, then other standards follow. Bromcom fully understood how the implementation process and AvISO work, having previously worked with us and having our platforms already in place. This made the project flow according to the plan and led to a smooth implementation.  AvISO was able to coach and mentor the Quality Manager at Bromcom making sure they fully understood how the ISO 9001:2015 standard works and how it can benefit their business. I was extremely happy with the result of the Stage 2 audit as they deserved it after all the hard work that had been put in!”

ISO 27001

“The key to the success of this project was the ability to collaborate with Bromcom using the AvISO Integrated Management System (IMS) Toolbox on Microsoft Teams. This provided everyone with a clear project plan and performance dashboard.

The main challenge was to produce a set of internal policies and procedures that clearly documented how Bromcom complied to the applicable ISO 27001 clauses. The IMS Toolbox enabled us to edit documents all at the same time and leave comments for other members of the team. The ability to look up related list information such as interested parties, controls and legal registers with the risk register also reduced duplication of effort.”