Arenema

BACKGROUND

Introduce your business and what you do there.

For over 70 years, COMET has been developing high-tech components and systems that serve industries such as semiconductors, electronics, automotive, aerospace, and security.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Arenema?

We needed support in implementing the ISMS Framework (ISO 27001) and managing documentation administration, including review and approval cycles. We also needed to liaise with R&D engineers and IT to align with the COMET infrastructure estate.

SOLUTION

What was the scope of their involvement?

Arenema supported the implementation of the ISMS Framework (ISO 27001), documentation administration (Review, Approval cycles), and liaised with the R&D engineers and IT to align with the Comet infrastructure estate. 

They also managed the review and approval cycles. They aligned the controls with OT, IT, and the business. Arenema created and managed over 100 documents, including policies, standards, guidelines, how-tos, and process flows.

What is the team composition?

We had a point of contact and the entire Arenema support framework.

How did you come to work with Arenema?

We found Arenema through a referral. We chose Arenema because of their holistic approach. Instead of trying to sell us services, they saw the gaps and adapted their offers to reflect them.

What is the status of this engagement?

We worked together from October 2024–April 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Arenema delivered all ISO 27001 documentation, completed all review and approval cycles, and aligned controls with the business. They provided a framework roadmap for ISO 27001, 27701, 27017, 27018, 41001, CRA, NIS2, and CRM framework implementation. The project was a success and had a positive impact on our organization. We now have an ISMS framework in place and can reference it.

The benefits we experienced since implementing the ISMS framework include:

• Stronger risk management: An ISMS helps identify, assess, and mitigate information security risks in a structured way, reducing the chance of data breaches or system failures.
• Regulatory compliance: It ensures that security practices align with legal and industry-specific requirements (e.g., GDPR, export controls), easing audits and reducing penalties.
• Improved stakeholder trust: With robust security measures in place, customers, partners, and investors gain confidence in the organization's ability to protect sensitive data.
• Operational resilience: Business continuity and incident response plans built into the ISMS help ensure quick recovery from disruptions.
• Continuous improvement: The ISMS fosters a culture of continuous improvement, encouraging regular reviews and updates to security practices.
• Streamlined incident response: Teams become faster and more coordinated when dealing with security events, thanks to clear protocols and defined responsibilities.
• More efficient audits and certifications: With standardized documentation and controls in place, audits go smoother, saving time and reducing stress across departments.
• Centralized risk management: Instead of scattered risk assessments, the ISMS brings a unified, proactive approach—making it easier to prioritize threats and invest in the right controls.
• Better employee awareness: Mandatory security training helps staff become more vigilant about phishing, password hygiene, and handling sensitive information.
• Improved vendor management: A structured evaluation process helps ensure third parties meet security expectations, minimizing supply chain vulnerabilities.
• Data classification and handling

The broadness of the scope was a challenge during the implementation because it made bringing it together cohesively initially was difficult but with Arenemas help we achieved clarity.
Arema created specific strategies:

• Tailored IT strategy consulting: They align technology initiatives with business goals, helping teams focus on what truly matters.
• Cybersecurity and risk assessments: By identifying vulnerabilities early, they reduce uncertainty and improve decision-making.
• Agile project management support: Their consultants often introduce agile methodologies to improve transparency, collaboration, and adaptability.
• Stakeholder alignment workshops: These sessions ensure everyone—from executives to developers—is on the same page about objectives and expectations.
• Clear documentation and communication frameworks: They help establish consistent reporting and feedback loops to avoid confusion during execution.

How did Arenema perform from a project management standpoint?

Arenema delivered on time due to lean, focused teams and iterative planning. They were highly responsive through direct access to consultants and decision-makers. Arenema was adaptable when project scopes evolved or new challenges arose. We primarily communicated face-to-face.

What was your primary form of communication with Arenema?

• In-person Meeting

What did you find most impressive about them?

We were impressed with Arenema's adaptability.

Are there any areas they could improve?

No, we were very happy with the results.