Zenia's experience.
Turning thirty years of hands-on trust into verifiable security, in the managed service provider market.
ISO 27001
4 months
For nearly thirty years, Zenia has managed outsourced IT for mid-sized Italian companies, acting as an ally rather than a supplier. When a regional cybersecurity funding call excluded it for lacking ISO 27001, it decided to turn its proven expertise into a recognised standard.
Published with the client's authorization · Certificate verifiable
the challenge
The starting point.
Zenia manages backups, networks, access and sensitive data for dozens of companies. Security has always been its priority, ensured by tracked procedures and rigorous internal methods. The limitation was fragmentation: everything was spread across different document systems and communication channels, and the model held up mainly thanks to constant human oversight. For years, reputation was enough for clients. Then the market began to demand certified standards, starting with larger companies. The turning point came with a regional funding call for cybersecurity: Zenia had every skill needed to take part, but the call required ISO 27001. Without certification, it was left out. And so were the clients it could have helped.
OUR SOLUTION
What we have done.
✓
Formalised in writing the procedures and best practices the team had been applying automatically for years.
✓
Brought document management, previously spread across different systems and channels, into a single model.
✓
Structured and made verifiable the management of the credentials, access rights and delegations used to administer client systems.
✓
Defined shared procedures to protect, maintain and review heterogeneous data belonging to different clients in a consistent way.
At first the journey seemed demanding, especially because of the formalisation effort it required. Then we realised the foundations were already there. Our focus on training, our care for procedures and the team's mindset were solid ground to build on. In the end, we didn't have to become a different company. We had to make what we already were visible and structured.
Roberto Fontana
Managing @ Zenia
results achieved
What changed after the certificate.
Credentials, access rights and delegations used to administer client systems, the most sensitive part of Zenia's work, now follow a documented and auditable process.
Funding calls, tenders and enterprise clients that require ISO 27001 as a precondition are now open to Zenia, the same requirement that had kept it out of the regional cybersecurity call.
Documentation and internal processes, once spread across different document systems and communication channels, now run on a single shared model.
Zenia no longer has to walk prospects through how it manages data, access and systems process by process. ISO 27001 answers those questions at the start of the negotiation.
read more
