Ivan Verkalets: The Relevance of ISO 9001 & 27001 for Outsourcing Excellence in 2024 (UA) UA Online IT Outsourcing Forum 2024 Winter Website – www.liof.org/online Youtube – https://www.youtube.com/startuplviv FB – https://www.facebook.com/ukrof

1. The Relevance of ISO
9001 & 27001 for
Outsourcing Excellence
in 2024
24 Feb 2024
www.coaxsoft.com

2. What we cover today
1.
2.
3.
4.
5.
What is ISO and my experience for 3+ years
Certification Roadmap
How ISO Impact Business operations
Does ISO help sales?
Recommendations

3. What is ISO
1.
2.
3.
4.
9001 - Quality
27001 - Information Security
Procedures
Policies

4. My Experience
1.
2.
3.
Certified COAX for 27001 & 9001
27001 mostly covers 9001
Certified for 3.5 years

5. ISO Roadmap
1.
2.
3.
4.
5.
6.
Board Decision
Find an auditor
Apply for certification
Prepare Docs
Get certified
Drink.

6. Prepare
1.
2.
Stage 1
Define Scope
Set Goals
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
Stage 2
Assets Management
Risk Management
Document and Control Management
HR Management
Legal Management
Work Procedures
Supplier Management
* Management
Physical Security
Information Security

7. Day of Certification
1.
2.
3.
Interviews with HODs
Questions
Office Guide

8. Business Processes Impact
1.
2.
3.
Strategy & Organisation Context
Annual Goals
SOW Analysis
PESTLE Analysis
1.
2.
3.
Risks Management
BCP
Incident Management Process
Incident Register
1.
2.
Assets Management
Register
Policy
1.
2.
Physical Security
Hardware
Office Access
1.
2.
3.
4.
5.
6.
Information Security
Password Policies
File Access Management
2FA Policies
Clients Code Access
​
Clients Customers Data Access
Trainings
1.
2.
3.
Supplier Management
Internal Compliance
Decision Makers
Criteria
1.
2.
3.
Work Procedures
Staff Onboarding & Offboarding Procedures
Project Onboarding & Offboarding Procedures
Almost anything

9. Business Processes Impact
Require to keep your processes in order.

10. Notes
1.
2.
3.
4.
Certification issues for 3 years with annual review
~4-6 months required to prepare for certification
You should have responsible people for each direction and they should
know core ISO procedures
ISO is not a list of completed processes

11. Sales
Does it help?

12. Sales
1.
2.
3.
4.
Not a lot
We haven’t had a client, who directly requested or asked ISO
Help us to close some clients (as one of the points) with some clients
It bring more value to business processes and organisation, but not for
sales particularly

13. If you decided to proceed
1.
2.
3.
4.
Do not waste a time on searching for templates
Find right auditor companies and ask them for templates
Have a dedicated person for this task
Tips in 2024: Looks like Gemini can help you a lot

14. Thank you 🤝
www.coaxsoft.com
Co Founder & CTO
Ivan Verkalets
ivan@coaxsoft.com