Preparing for ISO 27001 certification at Miell Quality Kft.: interview with Sejber Martin, our Information Security Manager
Why is ISO 27001 certification important in 2025?
In the digital era, information security is receiving increasing attention. Miell Quality recognized this trend and set the goal of obtaining ISO 27001 certification, one of the most widely recognized standards for information security worldwide. One of the key figures in this process is Sejber Martin, who transitioned from a quality assurance engineering role to lead the company’s preparation efforts.
A new role, new challenges: responsibility for information security
Previously, Martin was responsible for quality management, complaints handling, and audits. His new assignment coordinating the implementation of the ISO 27001 standard—brought a completely new perspective. In alignment with the TISAX framework, which serves as a data protection standard for large enterprises, ISO 27001 represents the first step toward a higher level of security culture.
“Our goal is to align with market and regulatory expectations and to create real competitive advantage in the field of data security,” Martin said.
Internal preparation and auditor training: the power of learning
Martin did not face this task alone. With the support of existing internal auditors and by completing an ISO 27001 auditor training course, he acquired in-depth knowledge of the standard. The training presented practical examples of implementation and helped establish a system-based mindset.
Collaboration with IT and involvement of all departments
As many ISO 27001 requirements relate to IT systems, Martin holds regular consultations with the IT team several times a week. However, the standard is not solely an IT responsibility: every department that handles data whether HR, procurement, or operations is involved in transforming policies and processes.
“Every part number, partner record, or personal data item must be handled in a transparent and regulated manner.”
Document management and physical security
Creating a document inventory and establishing storage policies are of paramount importance. The HR department, for example, handles numerous official documents, making compliance particularly critical in this area. In addition, the company is planning the introduction of physical security measures such as access control systems, replacement of door locks, and a redefinition of access rights all contributing to secure operations.
GDPR and ISO 27001: how are they connected?
Many people are familiar with GDPR, but fewer realize that ISO 27001 actually extends its logic. While GDPR primarily focuses on the protection of personal data, ISO 27001 aims to protect all types of information, whether digital or paper-based.
What can we expect during certification?
A prerequisite for certification is the completion of internal audits, followed by the implementation of improvement actions derived from audit findings. Only then can the official certification audit begin. The goal is to obtain ISO 27001 certification within this half-year.
“This is not just another certificate it represents a step change in how the entire organization operates.”
Industry trends: a unique corporate advancement
According to Martin, few companies of similar size are actively pursuing ISO 27001 implementation, positioning Miell Quality as a pioneer in this field. This not only enhances security but also creates a competitive advantage in the eyes of existing and future partners.
Why does this matter to all of us?
Information security is no longer solely the responsibility of IT it is a shared responsibility of every employee. Sejber Martin and many colleagues at Miell Quality are working diligently to elevate the company to a new level, not only by complying with regulations but also by setting an example within the industry.
Follow the blog closely soon we will also report on the results of the certification process!
