ISO 27001 certified

ISO 27001 in practice: how Sensus BPM Online can help

Organizations are placing increasingly high demands on information security, especially when they collaborate with a software vendor that manages business information.

That is why Sensus process management operates in accordance with the international ISO 27001 standard. We obtained the certification in 2022 and again met the standard during the most recent audit in 2026.

For customers, that means the assurance that we continuously give attention to information security and regularly have our working methods independently audited.

ISO 27001 looks at the entire organization

When it comes to information security, many people immediately think of firewalls, passwords, and cyberattacks. ISO 27001 takes a much broader view. The standard sets requirements for how an organization handles information, manages risks, and establishes security measures.

That concerns digital systems, but also physical documents, access rights, personal data, and the way employees work securely. All those components together form an Information Security Management System (ISMS).

Monique van Dodewaard regularly guides organizations through certification processes. She also fulfilled that internal role for Sensus's ISO 27001 certification.

"With clients, I regularly guide certification processes, but for Sensus this was the first time I worked with ISO 27001 myself. As a software company, you deal with additional requirements in the area of information security. That made this process extra interesting."

Information security is a shared responsibility

You don't achieve certification just with good software or clear procedures. Ultimately, it’s all about the people who work with it every day.

During the preparation for the external audit, Monique spoke with colleagues from various teams to map out processes, working methods, and control measures.

"Honestly, I expected that some colleagues would view ISO primarily as a necessary chore. The opposite proved to be true. Everyone actively contributed and understood why information security is important. That involvement made a major contribution to the certification process."

Thanks to that commitment, the certification process was not limited to audit preparation. The agreements made and improvements implemented still form the basis for how Sensus process management handles information security.

How Sensus BPM Online supported the certification

An ISO 27001 certification begins with insight. You map out processes and risks and document how you control them. Next, you must be able to demonstrate that improvements are actually followed up on. Only then can you show that information security is a structural part of the organization.

During the certification process, we used our own software. As a result, processes, risks, and control measures were interconnected, making it immediately visible which components were already covered and where attention was still needed.

"Whatever standard you want to achieve, you always start by describing your processes. Next, you record the associated risks and the control measures you have taken. Because we connected these in Sensus BPM Online, we maintained an overview and could easily demonstrate how our security cycle is set up."

According to Monique, the process therefore yielded more than just a certificate.

"We didn't just earn a certificate. We now have a system in place that allows us to continuously evaluate and improve our working methods."

The same software that customers also use

Many organizations use Sensus BPM Online to manage processes and support quality and compliance. For us, the certification process was a great confirmation that the software also does within its own organization what it was developed for.

We use Sensus BPM Online not only for our clients, but also for our own processes. That practical experience helps us to further develop the software.

Curious whether this way of working

is right for your organization?

See how processes become part of everyday work

Want to see how Sensus BPM Online makes process management part of the way people actually work? Try it for yourself and see whether it fits your organization.

Try it free for 30 days, with no commitment. You can get started right away.