As a leading software development agency delivering world-class software for clients globally, Cranmore understands the critical importance of maintaining a strong cyber security posture to meet the needs of its growing client base.

To guide them on this journey and demonstrate their commitment to information security, Cranmore engaged with Vertical Structure to help them become certified to the ISO27001 standard.

As a testament to our brilliant consulting team, Cranmore previously worked with us to certify their organisation to Cyber Essentials and Cyber Essentials Plus.

The Challenge

In a recent article, the UK Government outlined the important role that secure software development plays in the wider UK cyber security strategy:

“To achieve our aims, we must ensure consumers and businesses feel confident in digital technologies, which means the foundations of our technology must be secure. Software is one of the fundamental building blocks of digital environments: it underpins the operational function of all of our devices, and how they interact with each other in connected environments. Recent incidents such as the 2020 SolarWinds attack and the discovery of the Log4j vulnerability, have demonstrated the widespread impact which insecure software can have on businesses, charities, educational institutions and other organisations operating across the UK - and globally. Strengthening the resilience of software is an important part of strengthening organisational cyber resilience more widely. This will help reduce the cyber threat to the economy and prevent harm to businesses, UK citizens and the UK’s worldwide customers.”

This goes to show that as technology becomes increasingly relied upon by the UK and Global economies, software plays a critical role in facilitating business operations. That said, this also means that software systems and infrastructure are under increasing threat from those seeking to exploit vulnerabilities to cause disruption.

Why Cranmore Chose to Work with Vertical Structure

As a local expert in all matters of cyber security, Cranmore approached Vertical Structure expressing their interest in further advancing their cyber security posture.

More important than simply choosing a local partner, they required a partner who could expertly guide them through the certification process in an efficient manner that would minimise disruptions to their daily operations.

And like many of our customers, the complex appearance of obtaining certifications can be somewhat daunting, in particular ISO27001. This was also a concern shared by Cranmore and therefore presented a requirement for a partner who could simplify the process and deliver it in such a way that would allow their team to easily understand changes and adopt the positive cultural changes that come with it.

Vertical Structure was therefore the obvious choice with a track record of delivering ISO27001 and other consultancy services, as well as our reputation for promoting cyber security culture.

The Solution

Over a period of several years, Cranmore opted for a full suite of our consulting services including certification in CyberEssentials and CyberEssentials Plus and most recently, ISO27001.

The combination of all three has enabled Cranmore to continue its growth, winning bigger business while demonstrating its commitment to information security.

Results

Our brilliant consulting team worked closely with Cranmore, carefully planning out each stage of certification and guiding their team at a pace that wasn’t overwhelming or distracting.

In addition, the cultural changes brought forward as part of the process created many new baked-in security practices and helped sharpen their existing security processes.

How Vertical Structure Can Help You

Vertical Structure can be your guide to ISO27001.

• Identification of the priority areas for attention to attain ISO27001 standard
• Development of the appropriate systems and controls
• Development of the required documentation
• Transference of knowledge about the relevant threats, industry best practice and recognised standards as well as regulatory obligations
• Preparation for the audits and, on request, onsite support during the audits
• Management of the project to prepare the business for the audits within the agreed timeframe and budget.

Through a series of direct engagements and offsite work, our Certified ISO27001 ISMS Lead Auditor will expertly guide your team, and provide practical support, to build out the necessary systems and controls.