ISO 27001 at Scrive

Context

For an e-signature provider, security and compliance are not paperwork, they are what lets enterprise customers sign at all. Scrive needed the ISO 27001 certification that those customers ask for before they will trust a provider with their documents.

What I did

I led the preparation for and the successful audit of ISO 27001. That meant getting the controls, processes, and evidence in shape across the service operation, working with the teams so the way they ran day to day matched what the standard requires, rather than treating the audit as a one-off exercise.

Outcome

Scrive held ISO 27001, the certification its enterprise customers require, backed by operating practices that were built to keep meeting it rather than to pass a single audit.