Imaginera Achieves ISO 27001 Certification

When Imaginera was first established, the business primarily operated as a specialist engineering augmentation provider. Most delivery took place within client environments, meaning its corporate systems acted largely as secure access points into client networks rather than environments where client information was directly processed or stored.

As a relatively small organisation, Imaginera also relied heavily on cloud-based SaaS platforms to support its own operations without maintaining a significant internal technology footprint.

As the business evolved, however, so did its responsibilities.

The development of Orca, Imaginera's own SaaS platform, represented an important shift in the business. Imaginera was no longer solely providing technical specialists into client organisations. It had become responsible for designing, hosting, supporting and assuring a platform that clients considered operationally important.

This naturally changed the conversations the business was having with clients. Information security, governance and supplier assurance became increasingly important, with security and risk teams carrying out more formal due diligence as part of procurement processes. ISO 27001 certification was regularly identified as an important demonstration of good governance and information security management.

The challenge was to build an ISO 27001-certified Information Security Management System that would:

• Demonstrate effective information security governance 
• Stand up to external audit scrutiny 
• Support customer assurance requirements 
• Fit Imaginera's cloud-first operating model 
• Be practical enough for the business to own and operate internally 

Rather than implementing unnecessary bureaucracy, the objective was to create a management system that genuinely reflected how the organisation worked.

From the outset, Imaginera's strategy was to build an Information Security Management System that could be owned and operated internally.

The business understood its own operating model, risks and clients better than anyone, but recognised that specialist support was needed to interpret the ISO 27001 standard and develop the competence required to implement an effective management system.

Integral Management worked closely with the team throughout the implementation, providing practical consultancy, guidance and challenge where needed.

🔍 ISO 27001 implementation guidance

📋 ISMS design and documentation development

⚖️ Governance and policy development

⚠️ Risk management framework

🎯 Internal audit planning

📚 Audit preparation and certification readiness

👥 Staff guidance and management system ownership

🔄 Ongoing consultancy and continual improvement

Throughout the project, Jerry helped the team interpret ISO 27001 in the context of how Imaginera actually operates.

Rather than simply creating documentation to satisfy the standard, he challenged key design and governance decisions, helping ensure the management system remained practical, proportionate and aligned with both the requirements of ISO 27001 and the needs of the business.

The result was a transformation from a single employee handbook into a fully integrated Information Security Management System that Imaginera now owns and operates independently.

At Integral Management, we believe ISO management systems should become part of the way your organisation operates, not simply something that's prepared for certification.

Our consultancy focuses on helping organisations build practical, proportionate management systems that improve governance, strengthen risk management and support continual improvement long after certification has been achieved.

Our services include:

• ISO 27001 implementation 
• ISO 9001 consultancy 
• Gap assessments 
• Internal audits 
• Pre-certification audits 
• Ongoing ISO management system support 

Whether you're implementing ISO 27001 for the first time or looking to improve an existing Information Security Management System, we help organisations build management systems that deliver lasting business value.