{"id":305,"date":"2025-08-09T07:31:06","date_gmt":"2025-08-09T06:31:06","guid":{"rendered":"https:\/\/icompliance.eu\/compliance\/"},"modified":"2026-09-07T18:16:35","modified_gmt":"2026-09-07T17:16:35","slug":"compliance","status":"publish","type":"page","link":"https:\/\/icompliance.eu\/en\/compliance\/","title":{"rendered":"Compliance"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Compliance<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Compliance with all the regulations and laws your company is required to follow<\/em><\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe have implemented standards covering quality, the environment, health and safety, medical devices, food safety, energy, information security and AI, as well as the GDPR, whistleblower protection, DORA and NIS2 \u2014 tailored to the organisation\u2019s size and sector, with evidence ready for audit.\t\t\t\t\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSpeak to an expert \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSee Standards Covered \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/i>Quality<\/span><\/i>Environment & Health and Safety<\/span><\/i>Information Security<\/span><\/i>GDPR & DORA<\/span><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Compliance Status<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tProject in progress<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Controls Put in Place<\/h4>
76%<\/strong>Implementation phase<\/small><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Standards Covered<\/h4>

3<\/p>ISO 27001 \u00b7 GDPR \u00b7 NIS2<\/small><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Open Positions<\/h4>

7<\/p>With a designated person in charge and a deadline set<\/small><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Next Review<\/h4>

18 days<\/p>Scheduled internal audit<\/small><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/path><\/svg><\/div>
ISO 9001<\/strong> Quality Management<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/svg><\/div>
ISO 14001<\/strong>Environmental management<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/svg><\/div>
ISO 45001<\/strong>Health and safety at work<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/path><\/svg><\/div>
ISO 13485<\/strong>Medical devices<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/path><\/svg><\/div>
ISO 22000<\/strong>Food security<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/svg><\/div>
ISO 27001<\/strong>Information security<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/circle><\/circle><\/line><\/line><\/svg><\/div>
NIS2 \u00b7 DORA<\/strong>Digital resilience and cybersecurity<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>
RGPD<\/strong>Protection of personal data<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>
ISO 50001<\/strong>Energy management<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>
ISO 22301<\/strong>Business continuity<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>
ISO 37001 \u00b7 GDPR<\/strong>Anti-corruption<\/small><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n
<\/rect><\/path><\/svg><\/div>\n
ISO 42001 \u00b7 AI Act<\/strong>Artificial Intelligence<\/small><\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What we do<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

From diagnosis to certification, with no shortcuts that could compromise the audit<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Maturity assessment<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe assess the current situation in relation to the relevant standard or legislation and prioritise the gaps that have the greatest impact and require the least effort to rectify first.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Implementation of controls<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe design realistic policies, procedures and operational controls for the team to put into practice \u2014 not documents that end up in a drawer.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Preparation for certification<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe organise the supporting documentation and carry out a mock certification audit prior to the actual visit by the certification body.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Team building<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tPractical training for those who deal with compliance on a day-to-day basis \u2014 not generic presentations on the standard.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/circle><\/circle><\/line><\/line><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Multi-framework<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIf more than one standard is required, we map shared controls to avoid duplication of effort between them.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Ongoing maintenance<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tFollowing implementation, we monitor the maintenance of controls between audit cycles and in the light of changes to legislation.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How we work<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

A clear process, with no surprises along the way<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
1<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Diagnosis<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe assess the current situation against the relevant standard or legislation, and define the scope and objective (certification or simply practical compliance).\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
2<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Action plan<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe prioritise gaps based on their impact and the effort required, with clear points of contact and deadlines for each action.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
3<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Implementation<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe design and implement policies, procedures and controls, whilst providing direct support to the teams involved.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
4<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Internal audit<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe simulate the actual audit to identify and rectify any shortcomings before the external assessment.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
5<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Certification & maintenance<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe monitor the certification audit and, if required, the ongoing maintenance of controls.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Who is it for?<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Compliance tailored to the organisation\u2019s size and sector<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Growing SMEs<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tFirst-time implementation of ISO 27001 or the GDPR, with as little red tape as the law allows.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Regulated companies<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tDORA and NIS2 for financial institutions and critical infrastructure, with tight legal deadlines.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Suppliers to major clients<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tCertification required under the contract, prepared within the client\u2019s deadline.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Multi-standard organisations<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tMultiple standards to be applied simultaneously, with shared controls to minimise duplication of effort.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Frequently Asked Questions<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Common questions about compliance<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Which standards and laws does iCompliance implement?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tISO 27001, ISO 9001, ISO 45001, ISO 22000, ISO 14001, ISO 37001 and ISO 42001, as well as the GDPR, anti-corruption, whistleblower protection, DORA and NIS2.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Do I need to be certified to a particular standard to get started?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tNo. We start with a maturity assessment and map out the path to certification, or simply practical compliance if that is the objective. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Does the support cover implementation only, or does it also include maintenance?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe cover both: initial implementation and, if you prefer, ongoing support to keep your controls up to date between audits.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Speak to an expert<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Start with a free 30-minute assessment<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tTell us which regulation or law you need to comply with and receive a preliminary compliance plan.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t