About Steve the Clerk
Steve the Clerk is a Finnish software company that builds data integration platforms and custom business tools for industries ranging from manufacturing to financial services. The company’s platform, Steve the Clerk HUB, connects scattered data sources into practical working tools: sales configurators, risk management solutions and forecasting systems that replace slow, manual processes. Steve the Clerk serves customers including industrial manufacturers, financial institutions and public sector organisations.
Background
Steve the Clerk has been building and improving their cybersecurity management in the long term. As a software company that handles sensitive customer data across multiple industries, it is in scope for NIS2, ISO 27001, GDPR and DORA at the same time, and each of these has its own requirements and its own grey areas.
In this project, the company wanted to improve its continuous readiness for audits and to integrate cybersecurity management more closely with their daily ways of working. Before adopting Cyberismo, the company’s cybersecurity documentation was managed in different tools and documents. With multiple overlapping regulations, many of them open to interpretation, it was hard to know whether enough had been done.
How Cyberismo helped
Steve the Clerk adopted the Cyberismo solution for company-level information security management, covering the applicable regulatory frameworks in a single system. CEO Juho Sirén took a hands-on approach to the deployment. He worked together with the Cyberismo team, but learned to use and customise the system himself instead of outsourcing the work.
The company used Cyberismo’s ready-made content modules as a starting point. Sirén then adapted them to fit Steve the Clerk’s specific needs, for instance by combining the NIS2 and GDPR requirements into a shared view and by adding progress tracking with percentage indicators. The Cyberismo team provided consulting support during the learning phase, so that the competence stayed in the company.
Steve the Clerk now runs a quarterly cybersecurity review cycle. The CEO reports on changes and process updates to the full team, the security officer reviews the threat landscape, and tasks are assigned and tracked in Cyberismo. External training sessions with Cyberismo are held once or twice a year to keep skills up to date.
Audit readiness is also a sales argument
Because the practices are documented in a format that is ready for an audit, Steve the Clerk can tell its own customers that they are welcome to audit the company whenever they like. For a supplier that handles other companies’ data, being able to say that without a separate period of preparation first is a commercial argument as much as a security one.
Testimonial
Thanks to adopting the Cyberismo solution for cybersecurity management, I know all the time that we’ve done things well enough, without having to gather evidence from multiple documents and tools. That’s probably the biggest value, and it’s a real selling point for our customers, too. We can tell them: you’re welcome to audit us anytime.
Juho Sirén, CEO, Steve the Clerk