Baltum Bureau

BACKGROUND

Please describe your company and position.

I am an executive at Agiliway

Describe what your company does in a single sentence.

Agiliway is a custom software development and IT consulting company headquartered in Austin, Texas, with development centers in Poland and Ukraine.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Cybersecurity IT Strategy Consulting Other IT Consulting and SI

SOLUTION

How did you find Baltum Bureau?

Online Search

Why did you select Baltum Bureau over others?

Company values aligned

How many teammates from Baltum Bureau were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We have been working with Baltum Bureau for over five years, starting with our first ISO 27001 implementation, then ISO 9001, and most recently the transition to ISO 27001:2022.   What made this cooperation truly valuable was not only the successful completion of certification processes but the way it was achieved — as a collaboration between two highly professional teams.   This partnership was built on trust, mutual respect, and a shared goal of creating a robust and effective management system.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Over five years of cooperation, we obtained ISO 27001 and ISO 9001 certifications and most recently transitioned smoothly to ISO 27001:2022, ensuring continued compliance and improved operational resilience.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Bureau demonstrated excellent project management throughout our cooperation. They delivered all milestones on time and ensured that certification processes stayed on schedule. Their team was highly responsive, proactive in addressing our needs, and adapted their approach to fit our internal processes, which made the collaboration smooth and efficient.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about Baltum Bureau was their deep expertise combined with a collaborative approach.

Are there any areas for improvement or something Baltum Bureau could have done differently?

Overall, we were very satisfied with the cooperation and do not see significant areas for improvement

BACKGROUND

Please describe your company and position.

I am the Project Manager, IMS Manager of Gera-IT

Describe what your company does in a single sentence.

Web & Mobile Development for Startups and SMB

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Our primary goal in hiring Baltum Bureau was to prepare our company for ISO 9001:2015 and ISO/IEC 27001:2022 certifications. We needed expert support to ensure our internal processes, documentation, and team were fully aligned with the requirements of both standards.
• Identifying and closing compliance gaps in documentation and processes
• Training our ISMS/QMS Committee to meet their responsibilities under both standards
• Performing an internal audit to verify readiness for external certification
• Passing the official certification audits

SOLUTION

How did you find Baltum Bureau?

Online Search

Why did you select Baltum Bureau over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Baltum Bureau provided comprehensive ISO consulting and audit support services to help Exfluency prepare for and successfully obtain ISO 9001:2015 and ISO/IEC 27001:2022 certifications. The engagement covered every stage of the certification journey — from initial gap analysis to final audit support — with a focus on practical implementation and internal capacity building.

Key Deliverables Included:
- A full review of our existing corporate documentation to identify compliance gaps and provide structured recommendations for improvement.
- Customized training sessions for our ISMS/QMS Committee, ensuring they understood their responsibilities, the requirements of each standard, and how to maintain the systems effectively post-certification.
- Creation and/or revision of essential documentation for both ISO standards, including:

-- Policies (e.g., Information Security Policy, Quality Policy)
-- Risk assessment and treatment plans
-- Process descriptions and procedures
-- Control objectives and implementation guidelines
-- Record templates and tracking mechanisms
- A formal internal audit covering both standards to assess our readiness, identify potential nonconformities, and ensure a smooth external audit process.
- End-to-end support throughout the external certification process, including preparation, coordination with auditors, and addressing any final observations or required clarifications.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

With Baltum Bureau’s support, we successfully achieved ISO/IEC 27001:2022 and ISO 9001:2015 certifications on time and without nonconformities. The project resulted in complete, audit-ready documentation, a fully trained ISMS/QMS Committee, and a successfully passed internal audit. All deliverables were met within the agreed timeline, significantly strengthening our internal processes and compliance posture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Bureau demonstrated excellent project management throughout the engagement. They delivered all items on time, followed a clear roadmap, and maintained consistent communication. Their team was highly responsive, quickly adapting to our feedback and providing practical solutions tailored to our needs at every stage of the process.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about Baltum Bureau was their ability to combine deep ISO expertise with a practical, business-oriented approach. They've tailored every recommendation to fit our specific context, making the process efficient, relevant, and easy to adopt internally.

Are there any areas for improvement or something Baltum Bureau could have done differently?

Overall, we are very satisfied with the collaboration. 

BACKGROUND

Please describe your company and position.

I am the Head of Partnerships of SoftBees

Describe what your company does in a single sentence.

SoftBees is a Ukrainian IT company with offices in Ukraine and Poland, specializing in the development of scalable fintech solutions. We help banks and financial institutions — from digital banking to SaaS — enter the market quickly and launch innovative products. SoftBees also develops PayBees, an alternative to internet acquiring, and provides consulting services in the field of digital transformation, particularly through the use of AI.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• The goal of our collaboration with Baltum Bureau was to efficiently prepare both our Ukrainian and Polish entities for ISO 27001 certification within a tight six-month timeline.

SOLUTION

How did you find Baltum Bureau?

Referral

Why did you select Baltum Bureau over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of Work
Baltum Bureau supported us through the full lifecycle of preparing for ISO 27001 certification, covering both strategic planning and hands-on implementation. The engagement included assessing our current practices, identifying gaps, and building a complete, audit-ready Information Security Management System (ISMS) for our Ukrainian and Polish legal entities.

Their team worked closely with our internal stakeholders to ensure alignment between business operations and security requirements, while keeping the process lean, practical, and automation-friendly.

Key Deliverables

• Initial Gap Assessment:
  Review of existing policies, processes, and controls against ISO 27001 requirements.
• ISMS Architecture:
  Structuring and formalizing our internal practices into a compliant ISMS framework.
• Full Documentation Package:
  Creation and/or refinement of all required policies, procedures, registers, and templates — tailored to our operations.
• Risk Assessment & Treatment Plan:
  Facilitated risk identification, evaluation, and creation of a mitigation strategy aligned with business priorities.
• Training & Awareness:
  Guidance and support materials to ensure team understanding of ISO principles and internal responsibilities.
• Internal Audit Preparation:
  Coaching, dry-runs, and documentation reviews to ensure readiness for external auditors.
• Ongoing Advisory:
  Continuous feedback, Q&A support, and adjustments throughout the preparation phase.
• Certification Support:
  Assistance during the audit itself — responding to auditor queries and clarifying documentation as needed.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measurable Outcomes

• ISO 27001 certification successfully passed in Ukraine and Poland
• Project delivered on time — within 6 months
• All critical gaps identified and closed
• Key processes streamlined or automated
• Internal team enabled to maintain compliance independently

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Bureau demonstrated strong project management throughout the engagement. They worked in clearly defined sprints, kept us aligned with the roadmap, and consistently delivered all items on time. Their team was highly responsive — quick to adjust to our feedback, clarify requirements, and provide practical support whenever needed.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most was their ability to combine deep technical expertise with a practical, business-oriented approach — no fluff, just smart, efficient execution.

Are there any areas for improvement or something Baltum Bureau could have done differently?

At this point, we don’t see any areas for improvement — the collaboration was smooth and fully met our expectations.

BACKGROUND

Please describe your company and position.

I am the COO of a software development company

Describe what your company does in a single sentence.

Our company provides end-to-end software development services with a focus on healthcare, education, sports, and startups.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Assist in building information security management system
• Accomplish ISO/IEC 27001 certification

SOLUTION

How did you find Baltum Bureau?

Referral

Why did you select Baltum Bureau over others?

• Good value for cost
• Referred to me

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Baltum Bureau to support our journey toward ISO/IEC 27001 compliance. Their goal was to help them build a strong information security management system (ISMS) aligned with international standards.

Baltum Bureau provided a full range of consulting services — from initial gap assessment to practical implementation support. This included policy development, risk assessment facilitation, internal audit training, and overall preparation for certification. Baltum Bureau team worked closely with our internal stakeholders to ensure that every process met the requirements of ISO 27001, while remaining clear and usable in daily operations.

Thanks to strong collaboration, we achieved a mature and fully functioning ISMS — ready for formal certification and long-term sustainability.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The most valuable outcome was achieving a fully functional and audit-ready ISMS aligned with ISO/IEC 27001. Baltum Bureau helped us structure every process clearly and efficiently. Thanks to their support, we significantly reduced the time and effort spent on compliance-related tasks. The internal audit training they provided also empowered our team to maintain and improve the system independently. Overall, they helped us turn a complex standard into a practical and sustainable daily practice.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Bureau demonstrated excellent project management throughout our ISO 27001 preparation. They delivered every phase on time, communicated clearly, and were always ready to adapt to our needs. Their team was proactive, organized, and quick to respond when we had questions or needed clarification. They made a complex process feel structured and manageable. Overall, their approach was highly professional and effective.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about Baltum Bureau was how deeply they understood the ISO 27001 standard - not just from a theoretical perspective, but in terms of how to make it work inside a real organization. They didn’t overcomplicate things or hide behind jargon. Their team translated complex requirements into clear, practical actions we could actually implement. That clarity, combined with their structured approach and responsiveness, made them stand out.

Are there any areas for improvement or something Baltum Bureau could have done differently?

Honestly, nothing major stands out. Baltum Bureau handled the engagement smoothly from start to finish. If anything, maybe having more visual templates for policy documents could’ve helped speed up internal alignment - but that’s a minor detail. We were very satisfied overall.

BACKGROUND

Please describe your company and position.

I am the COO of Synebo LLC

Describe what your company does in a single sentence.

We provide all-inclusive Salesforce Soultions, outsourcing services, Product development services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Pass ISO Security 27001 external audit
• Pass ISO Security 27001 internal audit

SOLUTION

How did you find Baltum Bureau?

Online Search

Why did you select Baltum Bureau over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The main scope was to prepare the company, all processes and documentation of the company to comply with Global ISO security standards. Help to prepare internal trainings for the employees and make a long-term roadmap to support ISO 27001 standards in the future.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The main objective was to pass the external audit and to receive a security 27001 ISO certification, Baltum Bureau guided us through all the process from the beginning.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Bureau was very responsible, always replied on time and provided us with a templates for a various documentation, it really helped to fasten the processes. They responded in a timely manner or always updated on the delays in advance.

What was your primary form of communication with Baltum Bureau?

Virtual Meeting

What did you find most impressive or unique about this company?

This company, especially its founder Kyrylo, has a high level of expertise, lots of expirience and always aware of industry trends

Are there any areas for improvement or something Baltum Bureau could have done differently?

All was done in a professional way

BACKGROUND

Please describe your company and position.

I am the Chief Technology Officer of Qualium Systems

Describe what your company does in a single sentence.

Qualium Systems is a software development company creating VR/AR, Mobile, and Web applications for digital agencies and tech enterprises.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Develop and implement the ISMS and QMS for our company in preparation for the certification process.
• Support the company in successfully passing the audit to obtain ISO 27001 and ISO 9001 certifications.

SOLUTION

How did you find Baltum Bureau?

Online Search

Why did you select Baltum Bureau over others?

• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Baltum Buroo to support our company in aligning our internal processes with the requirements of ISO 27001 and ISO 9001 standards and to guide us through the certification process.

Their collaboration began with a comprehensive audit of our existing management practices. Based on the findings, Baltum Buroo provided expert guidance in designing and implementing an integrated management system (IMS) that combines both the Information Security Management System (ISMS) and the Quality Management System (QMS).

As part of this process, they assisted in developing all necessary regulatory and procedural documentation, tailored to our company’s operations. They also conducted training sessions to ensure that our personnel understood and could effectively support the new system.

Additionally, Baltum Buroo led us through an internal audit and played a key role in preparing our team for the official certification audit, ultimately helping us obtain ISO 27001 and ISO 9001 certifications.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The most significant outcome was the successful certification of our company for both ISO 27001 and ISO 9001 standards—achieved on the first attempt. 

Additionally, we now have a clearly defined and well-documented set of processes covering information security and quality management. Internal audits and risk assessments are now conducted regularly and in a structured manner. Employee awareness and engagement in compliance-related activities have also improved significantly thanks to the training and onboarding materials provided.

Overall, the collaboration led to measurable improvements in operational efficiency, risk management, and client confidence in our organizational maturity.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Buroo demonstrated a highly professional and responsive approach to project management. All deliverables were provided on time and aligned with our agreed milestones. Communication was clear, structured, and proactive throughout the engagement.

They listened attentively to our feedback, carefully considered our specific needs, and adapted their approach accordingly. Their ability to combine deep expertise with a flexible and collaborative working style made the entire process smooth and effective.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Baltum Buroo combined strong ISO expertise with a practical, business-focused approach. They quickly understood our specific needs and adapted their support accordingly. Their professionalism, clear communication, and focus on real results made them stand out.

Are there any areas for improvement or something Baltum Bureau could have done differently?

No significant areas for improvement come to mind.

BACKGROUND

Please describe your company and position.

I am an executive at an information technology company

Describe what your company does in a single sentence.

Our company provides IT systems integration services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Büroo to accomplish?

• Prepare company for ISO 27001 certification audit
• Help get certified against ISO 27001 standard

SOLUTION

How did you find Baltum Büroo?

• Referral

Why did you select Baltum Büroo over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Referred to me
• Company values aligned

What was the size of Baltum Büroo’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We have approached Baltum Buroo with the purpose to get assistance in preparing for ISO 27001 audit and certification. They have provided us with all the services necessary and all the deliverables. They conducted gap assessment, helped us develop the documentation and review our cybersecurity systems, based on risk assessment. They have provided security awareness trainings for us and conducted internal, management, and certification audits.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• We have been successfully taken through all the stages of ISO 27001 audit, obtained all deliverables, closed the identified gaps in our ISMS. The security awareness of our personnel has been taken to a higher level, and they became more prepared to prevent and respond to the information security incidents. All our joint efforts headed by competent Baltum Buroo's personnel successfully prepared us for the certification and took us the certification process itself.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was flawless. All the deliverables were provided according to the schedule, all the communications and responses where just the way we expected them to be.

What was your primary form of communication with Baltum Büroo?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive about them is how they managed to handle complicated tasks in the manner most convenient for us. Really professional.

Are there any areas for improvement or something Baltum Büroo could have done differently?

Nothing really

BACKGROUND

Please describe your company and your position there.

Light IT is a team of creative and talented professionals who understand the importance of high-quality work. For over 16 years in the field of providing software solutions, we had worked on more than 400 projects and contributed vastly to the success of many companies. My role is VP of IT Services

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Baltum Büroo?

Baltum assisted Light IT Global in achieving a security certificate - ISO 27001 for compliance with specific industry standards. They also provided and implemented ISMS documentation.

SOLUTION

How did you select this vendor and what were the deciding factors?

We were recommended Baltium by one of our partners. We got in touch with them, described our goal and they consulted us very professionally! Together with the Baltum team, we worked carefully to conduct an IS risk and incident management assessment and a Business Continuity Plan. We identified areas for improvement in order to meet ISO / IEC 27001 standards. After 5 months of the project, we successfully passed the audit and received ISO 27001 certification.

Describe the project in detail and walk through the stages of the project.

The ISO/IEC 27001 certification process took place in two stages:

1. Preparation of the company for certification. This stage includes:
   • staff training;
     • conducting a diagnostic audit (GAP analysis) to understand the company's assets and information resources,
     • development of policies and procedures required by the standard (for example, information security policies and objectives, asset register, information risk assessment of the company, personnel management policy, physical security policy, operating procedures for IT management, and many others); great attention in the development and audit is paid to the company's information assets: how they are defined and protected. The standard requires that risk assessments be developed for these assets and, accordingly, risk mitigation plans.
2. Conducting certification. In the first stage, there was an analysis of documentation and an internal audit. In the second stage, the auditor interviewed the staff and closed the requirements of ISO 27001 with evidence.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with two ISO 27001 consultants

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We successfully passed the audit and obtained the Certificate of Compliance to International Information Security (ISO/IEC 27001). The team has excellent customer service, professionalism, and a commitment to establishing a true partnership.

How effective was the workflow between your team and theirs?

Communication between the two teams was extremely effective. The deadlines were kept ideally during the whole process. If something had to be pushed, the team always notified us in advance.

What did you find most impressive or unique about this company?

First of all, I want to note flawless communication: we were always updated on the process, received all the answers on time and the guys asked us questions, that in perspective led to better results. The auditors knowledge of the team was on a high level, they understood the goals of the project which we felt were common for both teams.

Are there any areas for improvement or something they could have done differently?

We haven’t discovered anything that needs improvement. And if we need to develop new solutions, we will definitely collaborate with Baltum again.

BACKGROUND

Please describe your company and your position there.

I was hired as an outside consultant to design and implement an information security system for a software development provider. My task was to determine the current state of the business, especially in my focus area of marketing, sales and customer service. Once I did that, we documented the areas of concern and proceeded to select a vendor to design and implement the Information Security Management System (ISMS).

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Baltum Büroo?

The vendor's task was:

• to get the comprehensive information about the information security situation in the company
• to perform a number of interviews with stakeholders and employees
• to describe the possible information security system
• to offer the options and timeline for its implementation
• to prepare the company and the responsible persons to the audit for obtaining the certificate of compliance to international information security standard ISO / IEC 27001

SOLUTION

How did you select this vendor and what were the deciding factors?

We started the search for a vendor in January 2022, with a list of 10 potential companies selected based on various recommendations and ratings. The deciding factors were an understanding of the specifics of the IT industry in general and custom software development in particular. We also had strict criteria on the cost and timing of the ISMS implementation. It is also worth noting that Baltum Büroo continued to work with Ukrainian companies even during the war with Russia, which began on February 24, 2022. This was a decisive factor in favor of the vendor.

Describe the project in detail and walk through the stages of the project.

The project consisted of the following stages:

• initial study of information security policy
• development of an initial set of documents
• interviews with stakeholders and the information security officer
• creation of an Information Security Committee
• vendor conference with the Committee, development of training materials and an examination form
• development of schemes and documents of information security system
• consultations and trainings for company employees
• supervision of implementation of information security system

The main communication took place in Zoom, documents were transferred via Google Workspace with access via a corporate account. The training videos were posted on a private Vimeo account. The exam took place online.

How many resources from the vendor's team worked with you, and what were their positions?

There was 1 employee working directly with us as a Consultant. Two more people on the vendor side were engaged in the development of documents and support activities.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Information security system was developed and implemented, the audit for compliance to ISO/IEC 27001 information security standard was passed successfully. Project deadlines were postponed due to force majeure circumstances (Russian military aggression in Ukraine)

How effective was the workflow between your team and theirs?

Communication was excellent, even with wartime considerations. Ceremonies and regular meetings were held without exceptions, several additional web conferences were organized and additional documents were developed.

What did you find most impressive or unique about this company?

We turned out to have a common mindset that prioritizes client protection and satisfaction.

Are there any areas for improvement or something they could have done differently?

Perhaps more interactivity in training, like the use of an LMS, could have been helpful.