Asteron

BACKGROUND

Introduce your business and what you do there.

Aiby builds, acquires, and operates consumer apps and gaming businesses globally, leveraging AI, market analysis, and product expertise to deliver high-quality digital products. The company also has divisions in publishing, M&A, and a venture studio.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Asteron?

We hired Asteron to guide us through the ISO 27001 certification process and help us build a structured, practical information security management system suitable for our business. Our main goals were to understand the certification requirements, prepare the necessary documentation, improve internal processes, and ensure we were ready for the audit. We also wanted the process to be efficient and not overly complicated for our team.

SOLUTION

What was the scope of their involvement?

Asteron handled the full ISO 27001 preparation process for us. Their scope of work included reviewing our existing information security processes, identifying gaps, helping us define the required policies and procedures, and guiding us through the implementation of the information security management system.The main deliverables included ISO 27001 documentation, risk assessment support, guidance on required security controls, internal process recommendations, audit preparation, and ongoing support throughout the project. They also helped us understand the requirements clearly and kept the process structured and manageable for our team.Specifically, Asteron helped us prepare the key ISO 27001 documentation required for the certification process. This included the information security policy, risk assessment and risk treatment documentation, Statement of Applicability, security control-related policies and procedures, internal audit materials, and management review materials.They also provided practical templates and guidance tools that helped us organize the documentation, track required actions, and make the preparation process more structured and manageable for our team.

What is the team composition?

We worked with 2–5 teammates from Asteron.

How did you come to work with Asteron?

We found them through a referral. We chose them over other options because they were close to my geographic location, offered good value for the cost, and had company values aligned with ours.

How much have you invested with them?

We spent around $10,000–$50,000 on this project.

What is the status of this engagement?

We worked together from October 2025–February 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The main measurable outcome was that we successfully completed the ISO 27001 certification process. Asteron helped us move from preparation to audit readiness in a structured and efficient way.Other clear outcomes included having all required ISO 27001 documentation prepared, completing the risk assessment and risk treatment process, defining the necessary internal policies and procedures, and improving our overall information security management approach.The project also helped us create a clearer structure for security responsibilities, internal processes, and ongoing compliance activities. Overall, the result fully met our expectations.We didn’t track many formal KPIs during the project, but we had several clear indicators of progress and success. The main one was reaching audit readiness within the planned timeline. We also tracked the completion of key ISO 27001 documentation, the closure of identified gaps, completion of the risk assessment and risk treatment process, and readiness of the required internal policies and procedures.By the end of the project, the main security and compliance gaps had been addressed, the documentation was complete, and our team was prepared for the certification audit. For us, the most important measurable outcome was successfully completing the ISO 27001 certification process.

How did Asteron perform from a project management standpoint?

Asteron’s project management was excellent. They kept the process very well organized from start to finish, clearly explained each step, and ensured we always understood what was needed from our side.Communication was fast, clear, and proactive. They were responsive whenever we had questions and helped us stay focused on the right priorities throughout the project. We primarily communicated through virtual meetings, emails, and messaging apps.Moreover, they delivered everything on time. The project stayed on track, and their structured approach made the ISO 27001 preparation process much smoother and more efficient for our team.

What did you find most impressive about them?

What impressed us most was how much value Asteron delivered. For what felt like the cost of a platform, they essentially handled the project end-to-end themselves and guided us through the full ISO 27001 process.They required minimal time from our internal team, which was very important for us. At the same time, the quality of their work was very high. They were professional, efficient, fast, and clearly experienced in ISO 27001.Overall, they made a complex certification process feel much simpler and more manageable for us.

Are there any areas they could improve?

Honestly, there was nothing significant we would change. We were fully satisfied with the cooperation, the quality of work, communication, and the final result.Asteron managed the process very professionally, delivered everything on time, and made the ISO 27001 certification process much easier for our team. Everything met our expectations, so we didn’t have any meaningful areas for improvement to mention.

Do you have any advice for potential customers?

There were no major unexpected challenges or delays that significantly affected the project outcomes. The process was well structured, and Asteron helped us understand what needed to be done at each stage.As with any ISO 27001 project, some parts required internal coordination from our side, especially around documentation, risk assessment, and aligning internal processes. However, Asteron guided us through these steps clearly, which helped us avoid unnecessary delays and stay on track.Overall, the project went smoothly, and we achieved the expected outcomes.