Fintech

Reaching ISO 27001 without freezing the delivery roadmap

Enterprise deals were stalling in security review. The team had good practice but no evidence trail, and an auditor-led programme would have consumed the engineering roadmap for two quarters.

1 Jun 20241 min readBy Entrant

The challenge

Enterprise deals were stalling in security review. The team had good practice but no evidence trail, and an auditor-led programme would have consumed the engineering roadmap for two quarters.

What we delivered

Controls were mapped onto the tooling already in use, so evidence became a by-product of normal delivery instead of a parallel workstream. Certification landed inside a single quarter with the roadmap intact.

Disciplines

GRC
Security
Advisory

Keep reading

View all articles

Merchant acquiring1 Jun 20251 min read
Putting certified card acceptance on merchants’ own phones
Terminal cost was the single barrier keeping small merchants on cash. Hardware economics meant the processor could not profitably serve anyone below a monthly volume floor.
Read the article
Banking1 Jun 20251 min read
Migrating a national card switch without a maintenance window
A twelve-year-old switch was clearing every card transaction in the network and could not be taken offline. Every scheme mandate cycle was landing late, and the change queue had grown past what the team could clear in a year.
Read the article
Banking1 Jun 20241 min read
Moving fraud review from next-morning batch to real time
Fraud was reviewed the following morning from an overnight batch. By the time an analyst opened a case the funds had usually moved, and the rule set could not be changed without a release.
Read the article

Start a conversation

Have a topic you want us to cover?

Tell us what your team is wrestling with and we’ll turn it into a field note — or just talk it through directly.

Suggest a topic See what we build

The challenge

What we delivered

Disciplines

More articles

Putting certified card acceptance on merchants’ own phones

Migrating a national card switch without a maintenance window

Moving fraud review from next-morning batch to real time

Have a topic you want us to cover?

World-class insights, delivered weekly.

Your privacy choices