When we commenced our journey to become ISO certified, we invested a lot of time and money. We worked with external consultants and built our ISMS system from scratch within SharePoint. Although we successfully achieved ISO 27001 certification, the ongoing information security management was becoming too time-consuming. Keeping track of our review periods, risks, actions and internal audits was taking a lot of time to administer, and it wasn’t the best approach.”