Only two months after joining the company, I led the full ISO 27001 certification process and we closed it with zero nonconformities. How I structured it and the financial impact it had.
Turning compliance into measurable business value through structured leadership.
Only two months after joining the company, I was assigned to lead the full ISO 27001 certification process — despite it being my first time managing an external audit of this magnitude. The previous year, under different leadership, the company had faced several nonconformities and significant external consulting costs.
I approached the challenge with a structured methodology: rebuilding the ISMS documentation from the ground up, aligning every Annex A control, and establishing a clear task distribution and follow-up system. Each department was assigned measurable responsibilities, with weekly check-ins, internal audits, and evidence tracking.
Through disciplined project execution, cross-department collaboration, and full alignment with ISO 27001, we achieved a flawless external audit with zero nonconformities — a result never reached before in the company.
This success also generated a significant financial impact. By earning ISO 27001 Internal Auditor and Lead Auditor certifications I fully internalized the audit process, eliminating the need for outsourced auditors and saving the organization thousands of euros every year in recurring consultancy.
Additionally, having no nonconformities meant that departments avoided weeks of corrective rework and resource loss — translating into substantial time and cost savings across all teams.
This achievement proved the ability to lead complex compliance initiatives under pressure, structure large-scale projects effectively, and deliver measurable business value in a remarkably short period.
A year later (2026) we ran the cycle again and closed the external audit once more with zero nonconformities — this time with the internal pre-audit run 100% in-house, with no external consultancy at all. That second iteration is covered in detail in the April 2026 post.