Written by Tim Deakin

1st May 2024

• ISO 27001

Share this article

Just as accountants moved over time from physical book-keeping to spreadsheets and on to cloud-based software, so the cyber security landscape is moving towards SaaS (Software-as-a-Solution) products that help to improve the efficiency, speed and accuracy of day-to-day compliance tasks. 

At SRM we understand that tools designed to make internal processes and procedures more streamlined and manageable can only be a good thing for those organisations looking to not just gain certification with the likes of ISO 27001 or PCI DSS but maintain it consistently over time. 

For that reason our team of consultants have regularly trialled and tested some of the leading software solutions on the market in recent months, helping us to understand the benefits and drawbacks of various tools, so that we can better support our clients to utilise them and embed them in daily activities. 

In particular, we’ve spent the last 12 months working closely with Hicomply – a business that, like ours, is headquartered in the North East. Hicomply offers one of the leading ISMS platforms, helping to automate many aspects of security certification across ISO 27001, SOC 2 and PCI DSS, as well as enabling organisations to comply with the UK GDPR.

To date, our consultants have helped a number of clients to onboard to Hicomply’s ISMS and use the platform to prepare for audit with 100% pass rate. In the process, these forward-thinking organisations have found that having one single place to store all documentation and assets relating to compliance has helped to reduce the number of disparate files and spreadsheets that were previously involved in their work.

Similarly, being able to give our consultants access to their Hicomply account served to accelerate the process of preparing for audits and saved valuable time, money and resource.

As SRM consultant, Alan Batey, explains,

“The platform’s ability to house documents, policies and procedures makes it significantly easier for both SRM and our clients to manage progress, monitor gaps, measure risks and prepare for certification.

“We are successfully working with several of our clients to gain and maintain ISO 27001 certification using Hicomply and we look forward to utilising the platform for clients looking to comply with PCI DSS and SOC2 in the future.” 

Speaking on the importance of a close working relationship between cyber security consultancies and security software providers, Hicomply CEO, Ed Bartlett, adds,

“Working with knowledgeable and experienced consultancies like SRM is essential to us at Hicomply. We’ve built our ISMS with the input of consultants and we continue to develop it with their real-world experience as the cybersecurity landscape evolves. 

“Similarly, we know that businesses are looking to streamline their compliance efforts and embed processes and procedures using innovative automations and technologies. So, working collaboratively with the likes of SRM is of benefit to both parties.”

Want to find out more about how we are using technological solutions to make your compliance journey easier? Get in touch.