Automated Building & Energy Controls (ABEC) Ltd are a leading UK provider of building and energy management system (BEMS), with a growing international client base and an increasing need to demonstrate strong information security practices. To support their growth without compromising on security, ABEC made the strategic decision to strengthen their suite of ISO certifications by adding the internationally recognised ISO 27001 standard. Implementing its rigorous controls reinforced ABEC’s position as a trusted and secure partner for clients worldwide.
Facing the departure of their internal Information Security lead just weeks before their first ISO 27001 surveillance audit, ABEC needed urgent support to evidence full compliance and maintain their certification. Having experienced our commitment to high-quality consultancy during their ISO 27001 implementation the year before, ABEC turned to i3Secure for expert guidance.
i3Secure was engaged to rapidly assess and strengthen the ISMS within just 10 days, ensuring ABEC was well-positioned to pass the upcoming surveillance audit and retain their ISO 27001 certification with minimal findings.
Our consultant adopted a structured, time-efficient approach to make the most of the limited window. However, as is often the case, the true extent of the challenge only became clear after an initial gap analysis. With the audit just weeks away, completing this analysis quickly and accurately was critical to identifying and addressing key areas of non-conformance.
Compounding the challenge was the recent departure of ABEC’s HSEQ Manager, previously responsible for ISO 27001. As a result, our consultant had to work closely with individuals who had limited or no experience in information and cyber security. This emphasised the importance of our consultant’s ability to clearly translate technical concepts into practical, understandable terms, while also providing hands-on guidance and best practice advice for managing and sustaining the ISMS.
The engagement began with a comprehensive gap analysis, which uncovered several major findings. These included the need for more frequent internal audits, improved document governance, and clearer evidence of management reviews of the ISMS. These are common challenges among organisations working to strengthen their ISMS and, if not addressed, can lead to major non-conformities during audits.
To tackle these issues, our consultant worked closely with ABEC, offering expert guidance and hands-on support to get the ISMS audit-ready within the tight deadline. Given the scope of the findings and the limited time available, ABEC became a top-priority client to ensure delivery against all requirements.
A key priority was conducting an internal audit with a broad enough scope to demonstrate ISMS effectiveness and avoid any major non-conformities during the surveillance audit. In addition to completing the audit, our consultant also developed a forward-looking internal audit schedule to demonstrate ABEC’s ongoing commitment to maintaining ISO 27001 compliance across the full certification cycle.
Following the internal audit, a detailed report and updated audit plan were produced to inform a management review; another essential component of ISO 27001. The review was conducted with representation from leadership, including the Operations Director, and other key departments. This ensured a valuable and collaborative discussion, going well beyond a simple ‘tick-box’ exercise.
In parallel, our consultant conducted an extensive review of all relevant ISMS documentation, including policies, procedures, and supporting records. Documentation errors were identified and corrected quickly, with full respect for ABEC’s internal governance processes and in collaboration with the appropriate document owners.
Recognising the value of expert support during the audit itself, ABEC requested the presence of our ISO 27001 consultant on the day. Their role was to guide the team through the process, translate technical language, and ensure auditor questioning remained aligned with the ISO standard and audit best practices.
“i3Secure consultants have played an instrumental role in bolstering our security measures, diligently striving to comprehend ABEC’s unique identity and aligning our needs with compliance standards.
Their expertise has empowered us to establish a formidable security foundation, laying the groundwork for a resilient information security culture that serves both us and our clients. Their guidance was pivotal in our successful certification and our exemplary performance in our inaugural surveillance audit, underscoring the effective enhancements made to elevate ABEC’s trustworthiness and business standards.
Throughout our collaboration, i3Secure’s prompt responses and unwavering commitment to our requirements ensured a seamless and rewarding partnership.”
Operations Director, ABEC
ABEC passed their surveillance audit with minimal findings, which was a major achievement given the timescales and initial gaps.
With the ISMS now fully operational again, ABEC has returned to the strong position they held following their initial implementation. This reaffirms their leadership in the BEMS industry and reinforces their commitment to safeguarding client information.
Maintaining ISO 27001 certification has enabled ABEC to implement a consistent, effective framework for managing and protecting information assets. This not only strengthens their internal security posture but also ensures the confidentiality, integrity, and availability of client data.
Our knowledge transfer efforts have empowered ABEC’s internal team to take greater ownership of the ISMS, equipping them with the tools and understanding needed to sustain and enhance their information security practices. With our continued support, they are well-positioned to maintain long-term compliance and resilience.
Recognising the value of our expertise in achieving world-class ISO 27001 compliance, ABEC has chosen to extend our partnership. i3Secure will now provide ongoing ISO 27001 consultancy support throughout the certification cycle, helping to ensure continued success in future audits.
Download the Case Study
We help organisations like ABEC navigate complex security standards with clarity, speed, and confidence. Whether you’re preparing for audit, rebuilding capability, or maintaining compliance, our consultants become a trusted extension of your team, translating complexity into action and ensuring results.
Jason McAdam, Director & Co-Founder of i3Secure commented on the work:
“It’s not uncommon for clients to come to us when the pressure is on, whether it’s an upcoming audit, a key contractual deadline, or a sudden gap in resource. At i3Secure, we pride ourselves on being hyper-responsive, flexible, and committed to getting the job done. We understand the urgency and always do what it takes to deliver the right support, exactly when it’s needed.”
Get in touch with our specialists to learn how we can enhance your cyber security posture.
Contact Us 
Contact