Thomas de Mota, CEO of Feel Agile, and Carla Melendez, Chief Operating Officer, outline the approach they use on their projects: a clearly defined scope, a simple risk analysis, concise documentation, and a dry run before launch day.
“Less than 6 months” is a target timeframe. It depends on the scope of your project and your starting point, and is confirmed during an eligibility assessment. Certification is issued by an independent certification body.
A real-life exchange between two practitioners, illustrated by testimonials from clients they have worked with.
Carla Melendez discusses the four main causes of delays she sees most often, and how to address them right from the start.
ISO 27001 also covers organizational and legal aspects. Without project management or knowledge of the standard, the timeline will slip.
Hundreds of assets and risks that no one reviews. Consolidating the information that needs to be protected makes the analysis clear and easy to repeat each year.
A 30-page policy isn't helpful to anyone. Short documents that simply state the rule—and nothing more—are sufficient for the audit and for your teams.
Trying to do everything before the audit is a never-ending task. Prioritize based on risk, address what’s necessary, and save the rest for continuous improvement.
Each step builds on what you already have in place. The goal: a functioning information security management system (ISMS), rather than just another file.
Choose the activities to certify—the ones that matter to your customers. If the scope is defined poorly, you’ll have to go back and start over.
Start with your current practices and identify what still needs to be added—and nothing more.
A simple, standards-compliant method that your team can follow every year. It sets the priorities for the action plan.
Concise policies and procedures, tailored to the way you work.
Weekly meetings and steering committees to ensure a smooth process.
A mock audit under real-world conditions, conducted by another project manager; addressing nonconformities; and then the audit by the certification body.
He has been supporting companies with their certifications and digital transformation for 20 years. He facilitates discussions and shares customer feedback.
She led the ISO 27001 certification process for an enterprise software vendor before co-developing the Feel Agile methodology, which she continues to refine in collaboration with project teams.
Time from project launch to certification. Each project depends on its scope and starting point.
The masterclass outlines the methodology. The ISO 27001 self-assessment helps you determine where you stand in relation to the standard and prepares you for a discussion with a project manager.
