Sigma Software Security

BACKGROUND

Please describe your company and position.

I am the CEO/CTO & Co-Founder of CIGen

Describe what your company does in a single sentence.

We deliver custom software, AI innovation, and cloud modernization on Microsoft Azure, backed by certified expertise and enterprise-grade security.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sigma Software Security to accomplish?

• CIGen needed ISO/IEC 27001:2022 certification to expand into regulated markets, and had no existing ISMS. Our goal was to build one from the ground up and guide the company through the full certification lifecycle.

SOLUTION

How did you find Sigma Software Security?

Referral

Why did you select Sigma Software Security over others?

• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Sigma Software Security were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

The project included preparation for ISO 27001 certification and support with a final certification audit and process. Key deliverables included a dozen ISO 27001-related policies, assessments, a management review document, and additional training for our contractors.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Passed the ISO/IEC 27001:2022 certification audit with zero nonconformities, delivering the full ISMS lifecycle, from gap analysis to certification, within an 11-month engagement.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their project management and communication were perfect, always meeting agreed-upon deadlines and schedules and quickly addressing any feedback or issues as they arose.

What was your primary form of communication with Sigma Software Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Business and work attitude, responsibility and flexibility.

Are there any areas for improvement or something Sigma Software Security could have done differently?

Nothing comes to mind at the moment; we are fully satisfied with the results provided.

BACKGROUND

Please describe your company and position.

I am the CIO & EVP of DanAds

Describe what your company does in a single sentence.

Tech company delivering solutions to the global media industry

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sigma Software Security to accomplish?

• DanAds required ISO 27001 and SOC 2 certification as the platform scaled to serve major publishers (Hearst, Bloomberg, Tripadvisor, SoundCloud). Our goal was to progress the company toward both certifications by tightening documentation, processes, and policies to meet each standard's requirements.
• Embed security into the platform's AWS migration rather than retrofitting it afterward - applying the shared responsibility model and validating posture through ongoing audits.

SOLUTION

How did you find Sigma Software Security?

Other

Why did you select Sigma Software Security over others?

Referred to me

How many teammates from Sigma Software Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Summary: Since 2019, Sigma Software has been an indispensable partner in strengthening our security posture and driving our compliance initiatives. They have consistently delivered high-caliber technical expertise and strategic guidance to help us achieve and maintain rigorous ISO 27001 and SOC 2 Type II certifications. Their team demonstrates deep domain knowledge in cybersecurity governance, proactive risk management, and audit readiness. Communication is always transparent, reliable, and seamlessly integrated with our internal teams. We highly recommend Sigma Software to any organization looking for a trusted, long-term cybersecurity and compliance partner.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

ISO 27001- and SOC 2-aligned documentation and processes established, security controls embedded into AWS migration, enterprise publisher relationships sustained through scaling.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sigma Software’s project management and delivery have been exemplary throughout our multi-year collaboration. They consistently deliver compliance milestones and security deliverables on time, ensuring smooth, stress-free ISO 27001 and SOC 2 Type II audit cycles. Their team is remarkably responsive, adapting swiftly to evolving regulatory and technical demands while maintaining clear, transparent communication. They operate not just as an external vendor, but as a trusted, seamless extension of our internal team.

What was your primary form of communication with Sigma Software Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stands out most about Sigma Software is their ability to translate rigorous, complex compliance frameworks (ISO 27001, SOC 2 Type II) into pragmatic, engineer-friendly security practices. They don’t treat compliance as a periodic audit checklist—they bring proactive ownership, anticipating risks and keeping our systems audit-ready year-round. Their deep technical domain knowledge paired with their true sense of long-term partnership makes them exceptionally rare in the consulting space.

Are there any areas for improvement or something Sigma Software Security could have done differently?

Honestly, very little comes to mind. Throughout our multi-year partnership, any minor blockers or scheduling adjustments were addressed proactively and resolved with zero impact on our audit deadlines or security posture.