SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers

Exclusive: How ISMS.online is helping businesses tackle compliance challenges

Yesterday

Compliance can often feel like a daunting task for businesses. However, ISMS.online is proving that the right tools and guidance can make the journey more manageable.

Sam Peters, Chief Product Officer at ISMS.online, shared insights on how the company is driving positive change in the compliance sector, during a recent interview with TechDay.

"Our goal is to make compliance as seamless and enjoyable for our customers as possible," Peters explained. Having been with the business for over 12 years, Peters has seen ISMS.online evolve from working with the UK government to becoming a major player in the information security sector.

"When we started out, we had to obtain ISO 27001 certification to deliver our services. The auditor told us it was the best ISMS they'd seen and suggested we turn it into a product. That feedback shaped the business we are today," Peters said.

Now, ISMS.online is a global business with 70 employees, around 20 of whom work directly within Peters' team.

"I look after our platform development team, which includes product designers, UX experts, front and back-end developers, as well as a QA and systems administration team," he explained.

A key part of Peters' role involves engaging with customers to ensure their needs are met. "I spend a lot of my time talking with customers, working with our sales, success, and support teams to ensure we're delivering what they need."

ISMS.online helps businesses navigate compliance challenges by providing a clear path forward.

"Implementing a new standard can feel overwhelming. We guide organizations through the process, helping them build confidence and see the value compliance can bring," Peters said.

He highlighted the company's role in assisting businesses achieve ISO 42001 certification, a new AI standard.

"It encourages organizations to think about their overall approach to AI usage and creation. It asks businesses to consider issues like bias, data reliability, and relevant legislation," he explained.

Peters emphasised that ISO 42001 is flexible and allows businesses to adopt a proactive stance on AI governance. "It puts businesses ahead of the curve when it comes to adapting to new regulations," he added.

For those looking to understand ISO 42001 better, ISMS.online offers a comprehensive guide, designed to simplify the certification process.

Peters believes that a key challenge for businesses is a lack of resources. "Many businesses lack the time, expertise, or understanding to implement these standards. We address this by offering a structured onboarding experience designed to support those with limited resources," he said.

The company's "Assured Results Method" is designed to take customers through the implementation process efficiently. "Our platform sequences the tasks needed for certification in the most time-effective way," Peters explained. Additionally, their "Virtual Coach" tool offers guidance throughout the process.

Peters noted that ISMS.online's partnerships also enhance their offerings. "We work closely with global partners to provide consulting services, ensuring our customers get the support they need," he said.

The company has also built strong partnerships with audit bodies to ensure their clients are prepared for certification.

"We help customers connect with the right auditors based on their location, size, and industry," Peters explained.

Peters highlighted the company's focus on helping businesses maintain compliance long-term.

"Compliance isn't just about certification. You have to keep your ISMS maintained by staying on top of security incidents, management reviews, and ongoing improvements," he said.

Reflecting on the evolving compliance landscape, Peters believes businesses are increasingly aware of the importance of IT security. "The criticality of IT systems is driving greater awareness. Whether it's information security, AI governance, or data privacy, companies now understand the risks of failing to maintain proper systems," he said.

He also acknowledged the growing influence of legislative changes. "The EU AI Act and other emerging regulations mean businesses are under greater pressure to demonstrate compliance. For businesses working with global supply chains, this is especially important," Peters said.

Customer feedback has demonstrated the value ISMS.online provides.

"We recently had a customer review titled 'Fantastic System, Fantastic Support' which said our system had helped them "become compliant in areas in which our customers have asked us to improve." And that "the system itself is very logical and easy to use". They ended with 'I'm 100% satisfied,' which was really fantastic to hear," Peters shared.

ISMS.online also stands out for its dedication to customer service.

"We deliver an excellent, comprehensive package backed by strong customer support. Our customers often praise our team's knowledge and dedication," Peters said.

Since joining the company, Peters has witnessed remarkable growth. "We started with a small team of around 15 people, and now we're a global business with multiple data centres and support for over 100 standards," he said.

ISMS.online's recent achievements include winning Best Cyber Security Podcast, Best Cyber Security Blog, and Best Cyber Security Compliance Company at the Cybersecurity Excellence Awards. "It's been incredible to see our progress," Peters said.

Looking ahead, Peters remains optimistic about the company's future.

"This is just the beginning. The market is evolving, our product is evolving, and we're excited for what lies ahead," he said.