Spyrosoft
Speciality: Comprehensive Penetration Testing including Automotive and Application Security
IT services and consulting company based in Poland; provides software development and penetration testing services with CREST accreditation; 912 employees (+14.6% YoY growth), PLN 465.4M revenue, founded 2016, headquartered in Wrocław, Poland; global rank #421,197, local rank #29,872.
ISO 13485 and Cybersecurity/IT
Origin
ISO 13485 was developed by the International Organization for Standardization (ISO) and first published in 1996, with major revisions in 2003 and 2016. However, it's important to note that ISO 13485 is specifically a quality management system standard for medical devices and their related services—it is not primarily a cybersecurity or IT certification. The standard was created to help medical device manufacturers demonstrate their ability to provide devices and related services that consistently meet customer and regulatory requirements.
Industry Value
ISO 13485 is highly valued in the medical device industry because it provides a comprehensive framework for quality management that is recognized globally by regulatory authorities. Certification demonstrates an organization's commitment to product safety, regulatory compliance, and continuous improvement. While the standard itself focuses on quality management rather than cybersecurity specifically, the 2016 revision does address risk management throughout the product lifecycle, which can include cybersecurity considerations for software-based medical devices. For companies seeking to market medical devices internationally, ISO 13485 certification is often essential for regulatory approval and building customer confidence.
ISO 9001 and Cybersecurity/IT
Origin
ISO 9001 is a quality management system standard developed by the International Organization for Standardization (ISO), first published in 1987. However, it's important to note that ISO 9001 itself is not a cybersecurity or IT-specific certification—it's a general quality management standard applicable to any industry. For cybersecurity and IT specifically, ISO created ISO/IEC 27001 in 2005, which focuses on information security management systems. ISO 9001 was created to establish consistent quality management practices across organizations worldwide, while ISO/IEC 27001 was developed to address the growing need for standardized information security controls.
Industry Value
ISO 9001 is valued across industries for demonstrating an organization's commitment to quality, customer satisfaction, and continuous improvement, which can indirectly support IT operations. For actual cybersecurity and IT security certification, ISO/IEC 27001 is the recognized standard, valued because it provides a systematic approach to managing sensitive information, demonstrates due diligence to clients and stakeholders, and is often required for government contracts or business partnerships. ISO/IEC 27001 certification signals that an organization has implemented internationally recognized security controls and risk management processes, making it essential for building trust in an increasingly security-conscious business environment.
ISO 27001: Information Security Management Certification
Origin
ISO 27001 was developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), and was first published in 2005. It evolved from the British Standard BS 7799-2, which was created in the late 1990s. The standard was developed in response to the growing need for organizations to systematically manage and protect sensitive information in an increasingly digital business environment. ISO 27001 has since been revised, with major updates released in 2013 and 2022 to address evolving cybersecurity threats and best practices.
Industry Value and Importance
ISO 27001 is globally recognized as the leading standard for information security management systems (ISMS) and is valued for providing a systematic, risk-based approach to protecting sensitive data. Organizations that achieve ISO 27001 certification demonstrate to clients, partners, and regulators that they have implemented comprehensive security controls and are committed to maintaining confidentiality, integrity, and availability of information. The certification is particularly important for organizations handling sensitive data, as it helps meet regulatory compliance requirements, reduces security incidents, builds customer trust, and often provides a competitive advantage in procurement processes where information security assurance is required.
CREST Cybersecurity Certification
Origin
CREST (Council of Registered Ethical Security Testers) was established in 2006 in the United Kingdom by a group of cybersecurity professionals and industry representatives. It was created to address the growing need for standardized, recognized qualifications in penetration testing and cybersecurity services. The organization emerged from concerns about the quality and professionalism of security testing services, aiming to provide a framework that would certify both individual practitioners and the companies that employ them.
Industry Value
CREST certifications are highly valued in the cybersecurity industry because they demonstrate a practitioner's technical competence and adherence to professional ethical standards. Many government agencies, financial institutions, and large corporations specifically require CREST-certified professionals when procuring penetration testing or security assessment services. The certification provides assurance to employers and clients that certified individuals have been independently verified to possess the necessary skills and knowledge, and that they follow established codes of conduct. This makes CREST credentials particularly important for cybersecurity professionals working in regulated industries or seeking to work with organizations that have stringent security requirements.
- Ordnance Survey
- The Qt Company
- Simplyhealth
- Rascal
- Żabka Polska
- Crescent Med
- Nordisk Film