"So, finally the ISO 27001 certification is done! Now I can concentrate on other issues again for a while." - 11 months later you wake up and the first surveillance audit is just around the corner. "What does it actually look like with the continuous improvement process? Have we already dealt with the auditor's notes? Wasn't there a safety incident 3 months ago? Have we already done something about it? Shouldn't the Russian anti-virus software also be replaced? Who knows the current status? Oh, the colleague no longer works for us..."

Who hasn't experienced this? In order to achieve continuous improvement in your company, you should permanently record input from various sources, evaluate it and prioritise measures. But this is only the beginning, because the big challenge fo ...