BALTUM

BACKGROUND

Please describe your company and position.

I am the Chief Technology Officer of Qualium Systems

Describe what your company does in a single sentence.

Qualium Systems is a software development company creating VR/AR, Mobile, and Web applications for digital agencies and tech enterprises.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Bureau to accomplish?

• Develop and implement the ISMS and QMS for our company in preparation for the certification process.
• Support the company in successfully passing the audit to obtain ISO 27001 and ISO 9001 certifications.

SOLUTION

How did you find Baltum Bureau?

Online Search

Why did you select Baltum Bureau over others?

• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Baltum Bureau were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Baltum Buroo to support our company in aligning our internal processes with the requirements of ISO 27001 and ISO 9001 standards and to guide us through the certification process.

Their collaboration began with a comprehensive audit of our existing management practices. Based on the findings, Baltum Buroo provided expert guidance in designing and implementing an integrated management system (IMS) that combines both the Information Security Management System (ISMS) and the Quality Management System (QMS).

As part of this process, they assisted in developing all necessary regulatory and procedural documentation, tailored to our company’s operations. They also conducted training sessions to ensure that our personnel understood and could effectively support the new system.

Additionally, Baltum Buroo led us through an internal audit and played a key role in preparing our team for the official certification audit, ultimately helping us obtain ISO 27001 and ISO 9001 certifications.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The most significant outcome was the successful certification of our company for both ISO 27001 and ISO 9001 standards—achieved on the first attempt. 

Additionally, we now have a clearly defined and well-documented set of processes covering information security and quality management. Internal audits and risk assessments are now conducted regularly and in a structured manner. Employee awareness and engagement in compliance-related activities have also improved significantly thanks to the training and onboarding materials provided.

Overall, the collaboration led to measurable improvements in operational efficiency, risk management, and client confidence in our organizational maturity.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Baltum Buroo demonstrated a highly professional and responsive approach to project management. All deliverables were provided on time and aligned with our agreed milestones. Communication was clear, structured, and proactive throughout the engagement.

They listened attentively to our feedback, carefully considered our specific needs, and adapted their approach accordingly. Their ability to combine deep expertise with a flexible and collaborative working style made the entire process smooth and effective.

What was your primary form of communication with Baltum Bureau?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Baltum Buroo combined strong ISO expertise with a practical, business-focused approach. They quickly understood our specific needs and adapted their support accordingly. Their professionalism, clear communication, and focus on real results made them stand out.

Are there any areas for improvement or something Baltum Bureau could have done differently?

No significant areas for improvement come to mind.

BACKGROUND

Please describe your company and position.

I am an executive at an information technology company

Describe what your company does in a single sentence.

Our company provides IT systems integration services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Baltum Büroo to accomplish?

• Prepare company for ISO 27001 certification audit
• Help get certified against ISO 27001 standard

SOLUTION

How did you find Baltum Büroo?

• Referral

Why did you select Baltum Büroo over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Referred to me
• Company values aligned

What was the size of Baltum Büroo’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We have approached Baltum Buroo with the purpose to get assistance in preparing for ISO 27001 audit and certification. They have provided us with all the services necessary and all the deliverables. They conducted gap assessment, helped us develop the documentation and review our cybersecurity systems, based on risk assessment. They have provided security awareness trainings for us and conducted internal, management, and certification audits.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• We have been successfully taken through all the stages of ISO 27001 audit, obtained all deliverables, closed the identified gaps in our ISMS. The security awareness of our personnel has been taken to a higher level, and they became more prepared to prevent and respond to the information security incidents. All our joint efforts headed by competent Baltum Buroo's personnel successfully prepared us for the certification and took us the certification process itself.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was flawless. All the deliverables were provided according to the schedule, all the communications and responses where just the way we expected them to be.

What was your primary form of communication with Baltum Büroo?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive about them is how they managed to handle complicated tasks in the manner most convenient for us. Really professional.

Are there any areas for improvement or something Baltum Büroo could have done differently?

Nothing really

BACKGROUND

Please describe your company and your position there.

Light IT is a team of creative and talented professionals who understand the importance of high-quality work. For over 16 years in the field of providing software solutions, we had worked on more than 400 projects and contributed vastly to the success of many companies. My role is VP of IT Services

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Baltum Büroo?

Baltum assisted Light IT Global in achieving a security certificate - ISO 27001 for compliance with specific industry standards. They also provided and implemented ISMS documentation.

SOLUTION

How did you select this vendor and what were the deciding factors?

We were recommended Baltium by one of our partners. We got in touch with them, described our goal and they consulted us very professionally! Together with the Baltum team, we worked carefully to conduct an IS risk and incident management assessment and a Business Continuity Plan. We identified areas for improvement in order to meet ISO / IEC 27001 standards. After 5 months of the project, we successfully passed the audit and received ISO 27001 certification.

Describe the project in detail and walk through the stages of the project.

The ISO/IEC 27001 certification process took place in two stages:

1. Preparation of the company for certification. This stage includes:
   • staff training;
     • conducting a diagnostic audit (GAP analysis) to understand the company's assets and information resources,
     • development of policies and procedures required by the standard (for example, information security policies and objectives, asset register, information risk assessment of the company, personnel management policy, physical security policy, operating procedures for IT management, and many others); great attention in the development and audit is paid to the company's information assets: how they are defined and protected. The standard requires that risk assessments be developed for these assets and, accordingly, risk mitigation plans.
2. Conducting certification. In the first stage, there was an analysis of documentation and an internal audit. In the second stage, the auditor interviewed the staff and closed the requirements of ISO 27001 with evidence.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with two ISO 27001 consultants

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We successfully passed the audit and obtained the Certificate of Compliance to International Information Security (ISO/IEC 27001). The team has excellent customer service, professionalism, and a commitment to establishing a true partnership.

How effective was the workflow between your team and theirs?

Communication between the two teams was extremely effective. The deadlines were kept ideally during the whole process. If something had to be pushed, the team always notified us in advance.

What did you find most impressive or unique about this company?

First of all, I want to note flawless communication: we were always updated on the process, received all the answers on time and the guys asked us questions, that in perspective led to better results. The auditors knowledge of the team was on a high level, they understood the goals of the project which we felt were common for both teams.

Are there any areas for improvement or something they could have done differently?

We haven’t discovered anything that needs improvement. And if we need to develop new solutions, we will definitely collaborate with Baltum again.

BACKGROUND

Please describe your company and your position there.

I was hired as an outside consultant to design and implement an information security system for a software development provider. My task was to determine the current state of the business, especially in my focus area of marketing, sales and customer service. Once I did that, we documented the areas of concern and proceeded to select a vendor to design and implement the Information Security Management System (ISMS).

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Baltum Büroo?

The vendor's task was:

• to get the comprehensive information about the information security situation in the company
• to perform a number of interviews with stakeholders and employees
• to describe the possible information security system
• to offer the options and timeline for its implementation
• to prepare the company and the responsible persons to the audit for obtaining the certificate of compliance to international information security standard ISO / IEC 27001

SOLUTION

How did you select this vendor and what were the deciding factors?

We started the search for a vendor in January 2022, with a list of 10 potential companies selected based on various recommendations and ratings. The deciding factors were an understanding of the specifics of the IT industry in general and custom software development in particular. We also had strict criteria on the cost and timing of the ISMS implementation. It is also worth noting that Baltum Büroo continued to work with Ukrainian companies even during the war with Russia, which began on February 24, 2022. This was a decisive factor in favor of the vendor.

Describe the project in detail and walk through the stages of the project.

The project consisted of the following stages:

• initial study of information security policy
• development of an initial set of documents
• interviews with stakeholders and the information security officer
• creation of an Information Security Committee
• vendor conference with the Committee, development of training materials and an examination form
• development of schemes and documents of information security system
• consultations and trainings for company employees
• supervision of implementation of information security system

The main communication took place in Zoom, documents were transferred via Google Workspace with access via a corporate account. The training videos were posted on a private Vimeo account. The exam took place online.

How many resources from the vendor's team worked with you, and what were their positions?

There was 1 employee working directly with us as a Consultant. Two more people on the vendor side were engaged in the development of documents and support activities.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Information security system was developed and implemented, the audit for compliance to ISO/IEC 27001 information security standard was passed successfully. Project deadlines were postponed due to force majeure circumstances (Russian military aggression in Ukraine)

How effective was the workflow between your team and theirs?

Communication was excellent, even with wartime considerations. Ceremonies and regular meetings were held without exceptions, several additional web conferences were organized and additional documents were developed.

What did you find most impressive or unique about this company?

We turned out to have a common mindset that prioritizes client protection and satisfaction.

Are there any areas for improvement or something they could have done differently?

Perhaps more interactivity in training, like the use of an LMS, could have been helpful.

BACKGROUND

Introduce your business and what you do there.

I’m an information security specialist at Aventus Finance, a financial services company. We provide lending services in the Republic of Moldova.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with BALTUM?

We needed help building and formalizing our information security management system (ISMS). Handling customer personal and financial data is central to our lending business.

SOLUTION

What was the scope of their involvement?

BALTUM supported us in designing and documenting our ISMS in line with ISO/IEC 27001. The scope covered the full cycle, from identifying our information assets and risks to setting up controls and internal audit processes. Our key objectives were to:BALTUM delivered a set of ready-to-use ISMS documents and tools tailored to our company.

How did you come to work with BALTUM?

We found them through a referral. We chose them over other options because they offered good value for the cost.

What is the status of this engagement?

We worked together from November 2025–October 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We achieved the ISO/IEC 27001 certification as a direct result of BALTUM’s work. We also passed the external audit without issues.

How did BALTUM perform from a project management standpoint?

BALTUM’s team was reliable, quick to respond, and provided helpful documentation templates throughout the process. We communicated via email and messaging apps.

What did you find most impressive about them?

We were impressed by their professionalism and extensive experience.

Are there any areas they could improve?

No, they did everything well.

BACKGROUND

Introduce your business and what you do there.

Ascendix Technologies is a CRM consulting and custom software development company. We help businesses implement, customize, and support Salesforce and Microsoft Dynamics solutions, and develop specialized CRM products — including solutions for commercial real estate. We're headquartered in Dallas, TX, with operations in Portugal.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BALTUM to accomplish for your company?

We needed to transition our ISO 27001 certification from the 2013 to the 2022 edition and maintain active certification through ongoing surveillance audits.

SOLUTION

What was the scope of their involvement?

Baltum Bureau provided ISO 27001:2022 certification and surveillance audit services.

What is the team composition?

We worked with 2–5 teammates from Baltum Bureau.

How did you come to work with BALTUM?

We found them through a referral.

What is the status of this engagement?

The engagement is ongoing — certification requires periodic audits.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We successfully passed the first surveillance audit. The process was well-structured and time-efficient. Baltum Bureau's team was responsive and practical. We'd recommend them for companies looking for a certification body that doesn't overcomplicate the process. 

How did BALTUM perform from a project management standpoint?

Baltum Bureau delivered on time.

What did you find most impressive or unique about them?

Baltum Bureau is efficient and no-nonsense. They keep the process focused without unnecessary overhead, which is exactly what a small ISMS team needs.

BACKGROUND

Introduce your business and what you do there.

I’m an executive at AB Handshake. We provide automated fraud prevention solutions for SMS and voice traffic using machine learning and patented call validation to detect and mitigate telecom fraud in real-time for operators, regulators, and businesses.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with BALTUM?

We needed help with ISO 27001 certification.

SOLUTION

What was the scope of their involvement?

BALTUM helped us with ISO 27001 certification. They provided us with a checklist of requirements and helped us implement them. They also helped us with the documentation process.

What is the team composition?

We worked with 2–5 teammates from BALTUM.

How did you come to work with BALTUM?

Someone referred BALTUM to me. I chose them because they had high ratings, their pricing fit our budget, and they offered good value for the cost.

What is the status of this engagement?

We worked together from August 2025–June 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

BALTUM helped us get ISO 27001 and ISO 42001 certification.

How did BALTUM perform from a project management standpoint?

BALTUM’s project management was good. They delivered on time. We communicated via virtual meetings, emails, and messaging apps.

What did you find most impressive about them?

BALTUM’s team was very knowledgeable about the certification process.

Are there any areas they could improve?

There’s nothing I can come up with.

BACKGROUND

Please describe your company and position.

I am the Project Manager of Insight Solutions

Describe what your company does in a single sentence.

IT - integrator 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BALTUM to accomplish?

• Consulting for ISO 27001
• Internal audit

SOLUTION

How did you find BALTUM?

Online Search

Why did you select BALTUM over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from BALTUM were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work included consulting services for the implementation of the ISO 27001 standard. Key deliverables were:

 - Training the ISMS committee on the basics of the standard

- Assistance in developing and integrating documentation within the standard

 - Conducting an internal audit

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Education in new to company standart; Integration of the standart; Passing certification

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All deadlines were met; Response and communications were on high level; Overall i would say PM part was professional and i would rate it 10/10 

What was your primary form of communication with BALTUM?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

I was impressed by their discipline, professionalism, and patience.

Are there any areas for improvement or something BALTUM could have done differently?

Maybe open more branches so that it would be possible to work with them in person.

BACKGROUND

Please describe your company and position.

I am an Employee of PT Development LLC

Describe what your company does in a single sentence.

The company specializes in the development, implementation, and ongoing maintenance of software solutions for the retail sector. Its core product is designed to support businesses in managing the sale of goods, optimizing operational processes, and enhancing overall efficiency.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BALTUM to accomplish?

• To conduct an independent audit of our Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 requirements.
• To achieve official ISO/IEC 27001:2022 certification by ensuring full compliance with all applicable controls and standards.

SOLUTION

How did you find BALTUM?

Referral

Why did you select BALTUM over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost

How many teammates from BALTUM were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged BALTUM to perform the audit and certification of our Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022. The scope of work included a comprehensive review of our internal policies, procedures, and controls, as well as a two-stage certification audit (Stage 1 and Stage 2). BALTUM also provided clear guidance on compliance requirements, identified areas for improvement, and ensured that all processes were aligned with international best practices. Key deliverables included the successful completion of both audit stages, detailed audit reports with findings and recommendations, and the issuance of the ISO/IEC 27001:2022 certification.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We successfully transitioned to ISO/IEC 27001:2022, ensuring continued compliance with the updated standard while strengthening our operational resilience and information security practices.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

BALTUM team was highly responsive, professional, and proactive in addressing our needs and questions. They maintained clear and consistent communication, provided timely guidance, and adapted their approach to align with our internal processes. This ensured a smooth, efficient, and well-coordinated collaboration.

What was your primary form of communication with BALTUM?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about BALTUM was their strong combination of technical expertise and structured, yet flexible approach to the certification process. They demonstrated a deep understanding of ISO/IEC 27001:2022 requirements and were able to translate complex compliance demands into clear and actionable guidance. Equally important was their collaborative attitude and responsiveness. The team was not only highly professional but also genuinely engaged in supporting our success, which made the entire process efficient and well-organized.

Are there any areas for improvement or something BALTUM could have done differently?

What impressed us most was their ability to combine deep technical expertise with a practical, business-oriented approach. Their work was focused, efficient, and result-driven, with clear communication and no unnecessary complexity - just well-structured execution that led to a smooth and successful certification process.

BACKGROUND

Introduce your business and what you do there.

I'm the CEO of Proventa AG. We offer IT services and consulting for telecommunications, industry, trade, and banking companies, focusing on data migration and system integration.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Baltum Bureau?

We needed help with ISO 27001 certification.

SOLUTION

What was the scope of their involvement?

Baltum Bureau helped us prepare for internal and external reviews and training. The team also assisted with all the documentation required for ISO 27001.

What is the team composition?

We worked with four teammates from Baltum Bureau.

How did you come to work with Baltum Bureau?

Someone recommended Baltum Bureau to us. We chose the team because they were very professional and not as expensive as German ISO consulting companies.

What is the status of this engagement?

We started working with Baltum Bureau in February 2025, and the project ended on July 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We achieved ISO 27001 certification.

How did Baltum Bureau perform from a project management standpoint?

Baltum Bureau's project management is very professional. The team delivers on time and within budget. We communicate via email and Messenger.

What did you find most impressive about them?

I'm impressed with how Baltum Bureau takes care of every detail and answers every question. The team assists us in every aspect of the certification process. Baltum Bureau is extremely committed and available at any time.

Are there any areas they could improve?

No, there's nothing Baltum Bureau can improve on.