To strengthen the operational performance, information security and data protection capabilities of AnchorzUP through the development and implementation of an Integrated Management System (IMS) aligned with ISO 9001:2015, ISO/IEC 27001:2022 and ISO/IEC 27701:2019.
The EBRD-supported assignment focused on improving process standardization, risk management, regulatory compliance and organizational readiness for international business growth.
Year
September 2024 – March 2025
Client & Country
AnchorsUp, Kosovo
Type of Activity
Integrated Management Systems | ISO 9001 | ISO/IEC 27001 | ISO/IEC 27701 | Information Security | Privacy Management | Certification Readiness.
Activities:
Conducted an integrated gap assessment of quality, information security and privacy management practices.
Developed and implemented IMS policies, procedures, operational controls and records tailored to staff outsourcing and digital services.
Delivered management and staff training on quality management, information security, risk assessment, internal auditing and data protection.
Supported internal audits, management review, KPI monitoring and corrective action management.
Integrated ISO/IEC 27701 privacy controls and GDPR-related requirements into the information security framework.
Provided technical support throughout the external certification process conducted by TÜV AUSTRIA.
Results:
Achieved ISO 9001:2015 and ISO/IEC 27001:2022 certification within seven months, following successful TÜV AUSTRIA audits.
Established an integrated management framework covering quality, information security and privacy management.
Strengthened risk management, data protection, operational consistency and process accountability.
Enhanced organizational readiness to meet international client requirements and support scalable business operations.
Service Areas: ISO Management Systems | Information Security | Data Protection & Privacy | Organizational Development | Certification Support
