brainbits Governance & Compliance

Our Certifications

To ensure not only consistent quality, but also continuous improvement, we have set up a comprehensive quality management system with various auditing bodies. We have also objectively proven the effectiveness of our ISMS through ISO certification for information security.

What is a quality management system?

A quality management system ensures the consistent quality of processes, products and services. Part of this system is, for example, complete process documentation. At brainbits, too, knowledge of the complex work processes was mainly anchored in the heads of our employees for a long time. That's fine as long as everyone is present. However, if someone is absent, for example due to illness or a change of company, gaps in knowledge quickly arise that have to be painstakingly filled again. That is why we have decided to document all processes in writing and review them regularly. In case of doubt, anyone can easily check which tasks are to be carried out when, according to which rules and in which way.

Why ISO 9001?

The DIN ISO EN 9001:2015 standard identifies customer focus, process and system-orientated approaches and documentation as well as the continuous development and improvement of work processes as criteria for the product quality of a company. This comes very close to our own thoughts and approaches to quality. And because we don't just want to talk the talk, but are happy to provide tangible evidence, we have subjected our quality management system to the scrutiny of an independent certification body.

What is an ISMS?

As a company, we handle a lot of confidential or even secret information on a daily basis. Handling this data responsibly is our top priority, which is why we have implemented an information security management system. The ISMS establishes processes and rules that permanently define, coordinate, monitor and continuously improve information security in an organisation. An ISMS also includes numerous other topics such as guidelines, procedural documentation, asset management and much more. After working intensively on the topic of ISO 27001, we aligned our ISMS accordingly and ultimately had it certified. The cooperation of all colleagues played an important role in this, as the human factor should never be underestimated when it comes to security. The company Aware7 provided us with expert support on the path to certification.

Why ISO 27001?

The DIN EN ISO/IEC 27001 standard is a globally recognised standard. As the most important certification in the field of cyber security, it contains clear guidelines for systematically planning, implementing, monitoring and improving information security in line with your own requirements. This is not just about defence against attacks, but also about establishing a stable system that is as free from disruption as possible and in which confidential information is in the best possible hands. In order to achieve this certification, we spent many months preparing, training and setting ourselves up in such a way that we can continually optimise our ISMS.