Allcontrols

BACKGROUND

Please describe your company and position.

I am the Information Security Officer of an information technology company 

Describe what your company does in a single sentence.

Our company develops web, mobile, and conversational chat and voice solutions empowered by AI.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• AllControls was hired to perform an internal audit, specifically to assess our compliance with the ISO/IEC 27001:22 standard.

SOLUTION

How did you find Allcontrols?

Referral

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned
• Other

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of work

The scope of work involved conducting an internal audit of the Information Security Management System (ISMS) in accordance with the ISO/IEC 27001:2022 standard. This included a thorough review of relevant policies, procedures, and controls to check compliance with the standard's requirements and identify areas for improvement aimed at helping to mature our security processes and controls.

Deliverables

1) The “ISMS Audit Report,” which includes the following:

• • Assessment of compliance with ISO/IEC 27001:2022 requirements.
  • Evaluation of the maturity of ISMS.
  • Recommendations designed to mature our security posture.

2) Templates for internal documents.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Demonstrated auditor expertise: the audit process reflected the auditor’s deep knowledge and proficiency in ISMS best practices;
2. ISMS Audit Report and supporting materials: delivered a Report with actionable recommendations to strengthen the ISMS, along with templates for internal documents;
3. On-time delivery: all project deliverables were completed within the agreed timeframe;
4. Alignment with our expectations: the services provided met agreed standards and fully aligned with our quality expectations.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

AllControls demonstrated strong project management by delivering all items on time and maintaining clear, responsive communication. They promptly addressed our needs and adapted to changes without compromising quality or timelines.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We were most impressed by their auditor’s deep expertise in ISMS best practices, his skill in translating complex topics into clear and simple explanations.

Are there any areas for improvement or something Allcontrols could have done differently?

There is always room for improvement, but in this case, it is difficult to identify anything that could be specifically highlighted.

BACKGROUND

Please describe your company and position.

 I am the CISO & DPO of an information technology company 

Describe what your company does in a single sentence.

IT Service Organization 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• Conduct Internal Audit

SOLUTION

How did you find Allcontrols?

• Online Search
• Referral

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

ISO 27001 internal audit. Key deliverables: Comprehensive internal audit report along with detailed gap remediation recommendations 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Working with the vendor was instrumental in helping us prepare for our SOC 2 and ISO 27001 audits. Their team conducted thorough internal audits and delivered a detailed report that became the foundation for our compliance efforts. What stood out most was their deep expertise in security frameworks—they understand how controls map across multiple standards, which saved us significant time and effort.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their project management was highly structured and reliable. They delivered the internal audit report ahead of schedule, which gave us ample time to prepare for our SOC 2 and ISO 27001 audits. Deadlines were consistently met, and they proactively communicated progress updates without us having to chase them down. Even when we requested adjustments, they adapted quickly without disrupting the timeline.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Beyond administrative controls, their consultants bring strong technical knowledge from hands-on experience in the field. They’re not just advisors; they’ve been in the trenches themselves, which adds tremendous value to their guidance. Their flexibility, responsiveness, and commitment to long-term partnership made them a trusted resource throughout the process.

Another key strength is their industry versatility—they’ve worked with financial services, technology, telecom, and other sectors, so they adapt quickly to different environments. The vendor isn’t just a service provider; they’re a true partner who delivers real results. Highly recommend for anyone navigating complex security and compliance challenges.

Are there any areas for improvement or something Allcontrols could have done differently?

There is nothing to improve. A happy customer here. 

BACKGROUND

Please describe your company and position.

I am the CTO of Bivial AG

Describe what your company does in a single sentence.

It is a deposit-taking financial institution authorised by the Swiss Financial Market Supervisory Authority (FINMA) 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• To complete the endpoint security attestation for connectivity to the SIC system via SWIFT

SOLUTION

How did you find Allcontrols?

Referral

Why did you select Allcontrols over others?

• Good value for cost
• Referred to me

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

• Consultation sessions for the attestation completion
• Audit of the affected areas
• Solution proposals for streamlined, effective solutions
• Audit confirmation letters
• Audit Report

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Virtual meetings to understand the scope of the project
• Compliant solution proposals
• Necessary reports and letters generation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

That was really the best part. The project was extremely urgent for us and after our enquiry about the project the delivery of the project items were done exactly on time. The responded to our needs extremely accurately. We were really happy about how this project worked out for us.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The company understood our relatively complex needs very quickly, they provided all helpful material for us to help with the work that had to be done, then audited and documented everything very quickly. These are traits that are hard to find in a partner.

Are there any areas for improvement or something Allcontrols could have done differently?

No area for improvement, our perception is that their work was quite impressive.

BACKGROUND

Introduce your business and what you do there.

I’m the idea and information security manager at an influencer marketing platform.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

We needed help with an external audit and preparation for our ISO 27001 certification.

SOLUTION

What was the scope of their involvement?

Allcontrols provided cybersecurity services and consulting; they conducted an external audit and ISO 27001 certification preparation. Initially, we had a discovery meeting. They worked on-site for the audit and certification preparation, but the penetration testing with the fake phishing attack was done remotely.

What is the team composition?

We were in contact with 1–2 technical specialists.

How did you come to work with Allcontrols?

We searched on Google and found many platforms with different ratings from people who had gotten certified. Some of these reviewers said Allcontrols was a good company with experienced specialists and auditors. We talked to a few companies that had good feedback from end clients.

We checked service providers who were in the middle of the market in terms of price. We had several discussions with companies' representatives and chose the one who looked much more experienced. We chose Allcontrols because they seemed experienced and were open to conversation.

What is the status of this engagement?

We worked with Allcontrols from June–November 2024.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We received the ISO 27001 certification. Allcontrols did a lot for us to achieve the certification.

How did Allcontrols perform from a project management standpoint?

Allcontrols met deadlines and stayed on budget. They provided a project manager. We used Jira as a tool for management and Google Meet for communication. 

What did you find most impressive about them?

We were impressed with Allcontrols’ flexibility and quality.

Are there any areas they could improve?

There’s always room for improvement in the speed of implementing new features.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of RiskSeal, a startup that provides alternative data for credit scoring for fintech companies. We’re a B2B SaaS company, and we provide an API that allows our clients to put data on their borrowers.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

As we operate in the fintech space, there are high expectations from our clients in terms of security and the processes around the data they provide to us. We wanted to get ISO 27001 certified, so we needed someone to help us speed things up and prepare us for an audit. We also needed to identify any flaws in our current processes and improve them.

SOLUTION

What was the scope of their involvement?

Allcontrols provided us with their own security management system. They helped us prepare our staff by training them and providing security training, lectures, and questionnaires. We also keep our ISO-related registers, such as inventory and risk management, on their system.

Allcontrols helped us with the audit and reviewed the penetration tests we did ourselves. They also provided us with maintenance and updates using their system.

What is the team composition?

We worked with three people from Allcontrols: Mykhailo, the CEO; Yehor, the security specialist; and an analyst.

How did you come to work with Allcontrols?

Our COO found Allcontrols while doing research and met a couple of companies that offered this service. We ended up interviewing Allcontrols and liked their approach. It seemed like it just clicked.

How much have you invested with them?

We spent around $13,000 to $14,000.

What is the status of this engagement?

We started working together in April 2025, and the project was completed in June 2025. We plan to work with them again later this year to get our SOC 2 certification.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We obtained our ISO certification. Allcontrols gave us a holistic view of the security side of our business. We’re a startup, and we’re running fast, so we sometimes skip certain things for simplicity. Knowing the risks is important, and Allcontrols gave us a bird’s-eye view of all the problems we had. With their recommendations and advice, we were able to fix some of them and add others to our roadmap.

How did Allcontrols perform from a project management standpoint?

Allcontrols did a great job with project management. We had weekly meetings with them and used Google Meet as our primary communication tool. We also used WhatsApp and email. We used Jira for some smaller tasks, but didn’t use it across the team.

What did you find most impressive about them?

I really appreciated Allcontrols’ discipline and commitment to the goal. It was important for us to get the certificate soon, and they were ready to get involved and support us as much as needed.

Are there any areas they could improve?

There were some minor things, like the document formatting they used. I would have preferred them to be a little bit more accurate on this, but I understand we had some short deadlines, and there was no time for it.

Do you have any advice for potential customers?

I recommend being ready to dedicate enough time to the project. It’s not something Allcontrols can do for you; you still need to do a lot of work. All the heavy lifting is on your side. You need to ensure your process aligns with what’s written in the documents and that you have all the evidence you need to implement them. This is a lot of work, so I recommend preparing your team and ensuring they’re aware that this is important.

BACKGROUND

Introduce your business and what you do there.

I’m the head of IT and information security at Neonomics, a fintech company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Allcontrols provided penetration testing for our APIs. The team found a lot of issues and provided recommendations on how to resolve them. After we fixed the issues, Allcontrols did retesting.

What is the team composition?

We worked directly with Mykhailo.

How did you come to work with Allcontrols?

Allcontrols was recommended by a friend.

What is the status of this engagement?

We worked together from September–October 2024. However, we'll hire them for our next penetration test in September or October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Allcontrols provided high-quality work and found many issues that previous companies hadn’t found. I was happy with the engagement and will work with them again.

How did Allcontrols perform from a project management standpoint?

Allcontrols delivered on time and stayed on budget, and the team was responsive to our requests. Whenever I asked for something to change or re-check, the process was really fast because we had a direct line with Mykhailo. We used Jira for project management and communicated via phone calls and Slack.

What did you find most impressive about them?

Allcontrols delivered exactly what we expected.

Are there any areas they could improve?

I can’t think of anything for Allcontrols to improve.

Do you have any advice for potential customers?

Just ask for what you need.

BACKGROUND

Please describe your company and position.

I am the Head of Cybersecurity Division & GRC of Creatio

Describe what your company does in a single sentence.

Creatio provides the leading CRM in the industry to its many global customers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• Internal audit for recertification of ISO 27001 certificate
• Internal audit for recertification of ISO 27017 certificate
• Internal audit for recertification of ISO 27018 certificate

SOLUTION

How did you find Allcontrols?

Past relationship

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We utilized this company to perform internal audits for our preparation of ISO 27017, ISO 27018, and ISO 27001 recertification audits. As well as verification of GDPR and HIPAA compliance.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Regular meetings, regular status reports, and a complete overview of all controls measured. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was seamless from planning to implementation. The project went extremely smoothly. Expectations were set early on in the project. And were met on time. 

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Our specific auditor was very knowledgeable of the controls being measured. They provided deep insight into each control. 

Are there any areas for improvement or something Allcontrols could have done differently?

I was very impressed with Allcontrols professionalism. They delivered exactly what we expected of them.