11

That's not how this works. You don't collect certificates. being certified does not mean that you are secure customers only care about the certificates they care about The "best" certification is the one that serves your company's goals the best. If you pursue Cyber Essentials, but your customers want BSI Grundschutz, then you have wasted a lot of time ...


1

I agree with ‘schroeder’ response. However, I would suggest starting with ISO 27001, as this standard is referred to/consumed by other certifications like ISO 27017, ISO 27018, SOC 1, SOC 2, HIPAA, PCI-DSS, GDPR, PDPA, etc. The ISO 27001 standard gives you the foundation to build security and privacy practices within your organization as it's based on a ...


Only top voted, non community-wiki answers of a minimum length are eligible