3 ms·
You definitely can get in the door without ISO 27001, but you'll spend way more time on due diligence for each deal because you can't just point at the badge. W
by jon-wood 7y ago
You definitely can get in the door without ISO 27001, but you'll spend way more time on due diligence for each deal because you can't just point at the badge. Whether that's a trade off you're willing to make probably depends on your exact company, but ISO 27001 itself is a painful process to get certified for, especially if you're a young company without any established internal processes.
- sbarre 7y ago100% agree, but even if you don't go through the whole certification process (which is painful and expensive), it's worth spending the ~$1,000 on a "cert-in-a-box" kit to understand the framework of the standards and what kind of processes your company will eventually need to put in place as it grows. Also in my experience, being able to produce existing docs around your standards and processes, versus producing them on-demand, helps inspire confidence in the prospect's due diligence team, because it shows them you've thought of this before they asked about it. :-)