As Intelibliss enters its fourth year, we’re pleased to announce that we’ve become an ISO certified organisation, holding both ISO 9001:2015 for quality management and ISO 27001:2013 for information security management.
“If people like you they’ll listen to you, but if they trust you, they will do business with you.” Zig Ziglar’s line is a fair summary of why we did this.
Why we pursued certification
Our customers hand us access to the systems that run their IT, HR and customer operations, and often to the data in them. Saying “trust us” isn’t enough. The easiest way to show that we take quality and security seriously is to have an independent body check our processes against a recognised standard. That’s what ISO certification is.
ISO, the International Organization for Standardization, is an independent, non-governmental body that develops standards for the quality, safety and efficiency of products, services and systems. ISO 9001 covers how an organisation manages quality: how work is planned, delivered, reviewed and improved. ISO 27001 covers information security: how risks are identified, which controls are in place and how they’re maintained.
Certification tells customers, partners and anyone else we work with that our processes meet an international standard and are audited against it, rather than relying on our own description of them.
What it meant for us internally
Most companies start each year with a list of recurring operational problems they intend to fix. By March the list has usually been overtaken by whatever’s urgent. Working towards ISO certification forced us to turn those intentions into a documented management system with owners, reviews and evidence.
That took time and effort, and it was worth it. Having a plan, a management system and a regular audit cycle has made us more consistent in how we deliver projects and more deliberate about how we handle customer information. Our team notices the difference day to day, and our customers see it in how we run engagements.
What it means for customers
In practical terms, our customers can expect a few things from working with a certified consultancy:
- Defined processes for how engagements are scoped, delivered and reviewed, with records to show they were followed.
- Documented controls over how we handle customer data, including access, storage and retention, and who in our team can see what.
- A risk register and a review cycle, so new tools, new team members or new ways of working are assessed before they touch customer systems.
- A certificate we can share with procurement and security teams during supplier due diligence, which tends to shorten that conversation considerably.
Certification isn’t a finish line. Both standards require ongoing audits and continual improvement, and we’d rather be held to that than not.
Get in touch
If you have questions about our certifications, or about how we handle quality and security on an engagement, get in touch through our contact page or at info@intelibliss.com.
