ISO 27001 and GDPR, delivered by an engineer.
ZETSOL Technologies, a software consultancy. I guided the organisation to ISO 27001 and GDPR as its DevSecOps engineer.
- RoleDevSecOps engineer
- WhenMay 2023 to [TBD]
- Stack[TBD]
The problem
[TBD: why certification mattered to the company and its clients, and where it started from.]
What I changed
[TBD: the controls, the evidence and the pipelines.]
The result
ISO 27001 and GDPR, delivered. [TBD: audit outcome, timeline, and what the team does differently now.]
The changes, in order
- [TBD] Controls in codeWhich controls became pipeline checks instead of documents.
- [TBD] Evidence on autopilotHow audit evidence was collected without a spreadsheet.
- [TBD] The human partsWhat still needed people, and why.