Recently, we reached an important milestone: we became ISO 27001 certified. To be completely honest, we did not start this process from scratch. Information security had already been an important topic for us for quite some time. Over the years, we had established many processes, policies, and ways of working that were already aligned with ISO 27001 principles. Due to the expectations of our customers and the nature of our business, structured processes, risk awareness, and clear responsibilities were not new concepts to us.