CASE STUDY
How S2data GmbH mastered ISO 27001 and TISAX with Secfix’s expertise

About

S2data GmbH

S2data GmbH optimizes logistics processes with the latest mathematical models, ensuring maximum potential in the supply chain and operational accuracy for their key users while considering all constraints.

Location

Austria, Graz

Industry

Logistics

Employees

11-50

The Challenge

Achieving ISO 27001 and TISAX Certification

S2data needed the ISO 27001 certification and TISAX assessment with data protection since they had more and more customer requirements. They are a small team so getting compliant with two standards at the same time would require a lot of their effort and resources.

S2data told us that the main challenge was to establish a clear and efficient roadmap to quickly achieve ISO 27001 and TISAX compliance. They needed a comprehensive solution to navigate the complex certification processes.

The Solution

Easy ISMS Implementation with Secfix

S2data decided to work with Secfix because of the cross-collaboration between frameworks, standardized process for implementing an Information Security Management System (ISMS) and dedicated support from a customer success manager. Having both ISO 27001 and TISAX with data protection on the Secfix platform made their life easier.

Why Secfix

Efficient Automation and Dedicated Customer Success Support

Secfix's approach simplified the complexities of ISO 27001 and TISAX compliance.

  • Cross-mapping and automation between different standards: Secfix TISAX and ISO 27001 module are cross-mapped on the platform, meaning that all the policies and tasks conducted can be used for both standards without the need of duplicating the work.
  • Dedicated Customer Success Support: The customer success manager guided S2data through each step from the first kick-off until the certification and TISAX assessment, ensuring they met all requirements.
  • Automation of ISMS processes: Secfix features like the automated risk register and inventory were very helpful during the implementation phase. S2data was able to integrate everything on the Secfix platform without the need of having extra templates or excel sheets with different version histories.
Results

Achieving compliance and leaving more time to focus on the business

Since using Secfix, S2data has achieved both ISO 27001 certification and TISAX assessment with data protection. This has reduced extensive discussions with potential customers about their security measures, thanks to readily available documentation like ADV and TOMs. With these documents at hand, S2data can focus more on their core business activities, making the sales process smoother. Tips for First-Time ISO 27001 and TISAX Compliance Seekers Allocate enough time and push the implementation through multiple sprints. Use technical measures like Mobile Device Management (MDM). Get the entire team involved from the start and start living the processes as soon as they are defined. This proactive approach helps greatly during audits.

I recommend Secfix to any company starting the journey of ISO 27001 and TISAX compliance with data protection. Their platform and dedicated support made the process much more manageable. In fact, I have already recommended Secfix to several peers in the industry.

Dr. Stefan Lendl

CTO at S2data GmbH