At VM, 90% of our revenue comes from international customers due to our strong commitment to quality and excellence. We have worked with German clients for many years, following top software development standards and maintaining high data security. We often pride ourselves on delivering German quality from Poland. Nevertheless, we wanted to check that the standards we have put in place meet ISO 27001 requirements and ISO 9001 requirements. Obtaining ISO 27001 and 9001 certifications confirms our adherence to international standards.
A German certification body completed the process to ensure we recognize all critical customer aspects. This enhances our ability to support clients in securing new contracts through tenders and private procurement.
Table of Contents
What does ISO 9001 certification cover?
ISO 9001 certification covers an internationally recognized quality management system (QMS) standard. It provides a framework for organizations to consistently establish, implement, and maintain processes and procedures to deliver high-quality products or services to customers and stakeholders.
What are the fundamental principles of ISO 9001?
ISO 9001 certification involves a thorough audit by an accredited body to evaluate an organization's adherence to the standard. This certification showcases the organization's dedication to delivering quality products or services and ensuring customer satisfaction. Key principles include:
- Customer focus: ISO 9001 strongly ISO 9001 emphasizes understanding and meeting customer requirements to ensure satisfaction.
- Process approach: It enables systematic management through a process-oriented approach.
- Continuous improvement: ISO 9001 fosters a culture of ongoing enhancement by implementing process and performance improvement tools.
- Risk-based thinking: Involves identifying and managing risks and opportunities affecting product or service quality.
- Leadership: Effective top management involvement and active participation are crucial for a company's success.
- Evidence-Based Decision Making: To drive improvements, decisions should rely on data, analysis, and evidence.
- Documented information: ISO 9001 requires creating and maintaining documented information, including policies, procedures, and records relevant to companies.
Obtaining quality certification is demanding, but we have confirmed our compliance with all ISO 27001 and ISO 9001 certification requirements. We establish the path to our goal by setting appropriate processes and subjecting them to regular evaluation. We gauge customer and employee satisfaction through NPS surveys and consistently assess our suppliers in alignment with our certification to ensure we consistently offer the best talent in the market. Our developers undergo a series of technical and language-level verifications.
What is ISO 27001 certification?
The second ISO 27001 certification is an internationally recognized information security management system (ISMS) standard. It ensures systematic management and protection of confidential information within an organization.
What are the key principles of ISO 27001?
ISO 27001 is valuable for protecting confidential information, mitigating security risks, and building stakeholder trust. Obtaining ISO 27001 certification signifies our commitment to safeguarding information assets and ensuring sensitive data's confidentiality, integrity, and availability. Key principles include:
- Risk assessment: Organizations must identify and assess security risks to their information and take appropriate measures.
- Security controls: ISO 27001 defines controls and best practices for protecting information assets, including access control, encryption, incident response, etc.
- Policies and procedures: Information security policies, procedures, and guidelines must be documented to guide security activities.
- Continuous improvement: ISO 27001 promotes a culture of ongoing information security enhancement through regular ISMS reviews and updates.
- Compliance and certification: Organizations can apply for ISO 27001 through a formal audit and certification process, demonstrating their commitment to the best information security practices and standard compliance.
Our employees are well-versed in safe data usage, and new employees learn about our high-security standards during onboarding. We exclusively utilize secure software compliant with EU data protection standards.
Nonetheless, we continually seek improvement to maintain our services' highest possible quality and security.
