Case study
Metodo's experience.
Give a verifiable structure to information security practices that were already part of daily work.
A Modena technology company born in management software, working alongside trade associations and the SMEs they represent, with an open source approach that leaves clients in control of their own tools.
the challenge
The starting point.
Trade associations are increasingly digital. Member services, case management, information on thousands of businesses: a growing share of this work runs through technology tools, and therefore through the partners who build and manage them. More and more often, the question of how that data is protected comes before the project even starts.
Metodo knows this world from the inside. Born in management software, it has worked for years alongside trade associations and their SMEs, with a pragmatic approach and a precise choice: open source, for transparency and to leave clients in control of their tools. It manages all IT aspects of Lapam, and information security was already part of the way it works. When clients asked for guarantees, it answered with self-declarations or with audits run by the clients' own advisors. What was missing was a structure that made it verifiable from the outside.
The push came from the path linked to Lapam's Sustainability Report, which aimed to make the services offered to its members even more solid, and from conversations with prospects who explicitly asked for certification, or for whom its absence raised some doubts.
OUR SOLUTION
What we have done.
01
Skills and practices already in place turned into an information security management system, with clearer, shared responsibilities, procedures and control criteria.
02
Work on procedures, risks and audits that gave value and structure to well-established security practices, making them conscious and verifiable.
03
A path started well ahead of any deadline, with Complaion following every phase, leaving time for reasoning, in-depth analysis and formalizing procedures.
04
The whole team involved from the start, with the reasons and goals explained openly, so the project moved forward with shared awareness and everyone's collaboration.
More than a race to reach a goal, it was a path of awareness and organization. It taught us that certification is not a finish line, but a concrete opportunity to improve, grow and offer stronger guarantees to all the company's stakeholders.
Paolo Barbieri
Head of Digital & IT Projects @ Metodo
results achieved
What changed after the certificate.
A way of working that was largely already theirs is now clearer, traceable and verifiable, without overturning daily work.
The commitment to information security will be part of Lapam's 2026 Sustainability Report, the first occasion to show the work done within the association and to clients.
More attention to risks and a method for aspects once handled spontaneously, with greater awareness of the confidentiality, integrity and availability of information.
Clients and prospects who ask for guarantees on data and systems now get a recognized, third-party-verified answer instead of self-declarations.
