Looking for some real-world ISO 27001 experience — would really help a young team
Hey everyone,
hope this is okay to share here. I read through the subreddit rules beforehand, but if I missed something and surveys like this aren’t appropriate, apologies — just let me know and I’ll take it down.
We’re a small, very early-stage founding team with a cybersecurity background, and we’re currently trying to understand how ISO 27001 projects actually work in practice, not just how the process is supposed to work on paper.
We’re particularly interested in things like where teams lose the most time, what creates uncertainty, which parts are still unnecessarily manual, how consultants and software are used today, and where software or AI could genuinely make the process easier.
We put together a short survey around this. It takes about 8–10 minutes and can be completed anonymously.
If you’ve actually worked with ISO 27001 (internally, as a consultant, auditor, ISMS lead, security professional, etc) your experience would genuinely help us a lot at this stage. We’re still early enough that feedback from people who know this space can really influence what direction we take and stop us from building around the wrong assumptions.
We’re also absolutely not looking for people to tell us that our ideas are great. If you think software/AI isn’t particularly useful for certain parts of ISO, or we’re looking at the wrong problems entirely, we’d genuinely like to hear that too.
Here is the survey: https://tally.so/r/b5RAro
Thanks a lot to anyone who takes a few minutes to help us out. And again, mods, if this isn’t appropriate here, apologies — happy to remove it.