Data Edge - Creating a Smarter, More Efficient Digital ISMS

Modernising information security management with SharePoint, Microsoft Lists and Power Automate.

As organisations become increasingly reliant on digital systems and data, effective information security management requires more than policies and spreadsheets. For Data Edge, the challenge was to create a more structured and efficient way to manage its Information Security Management System (ISMS) while progressing towards ISO 27001:2022 certification.

CG Business Consulting worked with Data Edge to transform its existing ISMS records into a centralised digital system using SharePoint and Microsoft Lists, creating a more accessible, structured and audit-ready approach to information security management.

The Challenge

Data Edge’s ISMS records were being managed across a collection of static Excel spreadsheets and documents. While this provided a way to maintain the necessary information, it made it more difficult to ensure consistency, maintain data integrity and quickly locate the right information.

As Data Edge progressed towards ISO 27001:2022 certification, it needed a more robust digital infrastructure that could support its information security processes while remaining straightforward for employees to use as part of their day-to-day work.

The CG Business Consulting Approach

CG Business Consulting designed and implemented a centralised digital ISMS environment within Data Edge’s existing Microsoft ecosystem.

Core ISMS registers, including the risk register and risk treatment plan, were migrated from Excel into Microsoft Lists. Rather than simply replicating spreadsheet columns, the information was structured using appropriate SharePoint data types, including Choice, Person/Group, Date and Yes/No fields. This helped improve data integrity at the point of entry.

A central Master list of Documents was also created, providing one authoritative location for ISMS policies, procedures and governance records, together with their status and ownership.

To make the system easier for staff to navigate, CGBC created a dedicated ISMS home page, providing a single starting point with direct access to key registers and governance information.

Building a Connected Digital System

The project went beyond simply moving information from Excel into SharePoint.

Customised forms were created for each register, providing staff with a more guided and consistent way to enter information. A structured folder system was introduced to organise supporting evidence, while lookup fields and formulas connected related registers, allowing information to flow between records and reducing unnecessary duplicate data entry.

CGBC also integrated Power Automate into the document approval process, helping automate the tracking of approvals and version history.

Alongside the registers, existing Word-based policies and procedures were converted into formatted SharePoint Site Pages. This made key governance documentation easier for employees to browse and access, while reducing reliance on shared drives and individual Word files.

The entire environment was also given a consistent Data Edge visual identity, creating an internal system that felt purpose-built for the organisation rather than a collection of generic Microsoft tools.

The Outcome

Data Edge now has a single, structured and self-maintaining digital home for its ISMS records. The new system provides a clearer way to manage information, connect related records and access supporting documentation.

The digital infrastructure provides an ongoing foundation for internal audits, management reviews and the continued development of Data Edge’s information security management system.

Importantly, the system successfully supported Data Edge through its ISO 27001:2022 Stage 2 audit, providing structured digital infrastructure to support its certification journey.

Client Testimonial

"CG Business Consulting helped us transform the way we manage our ISMS, moving away from a collection of spreadsheets and documents to a much more structured and connected digital system. The new SharePoint environment has made our information security records easier to manage, navigate and maintain, while giving us a strong foundation to support our ISO 27001 requirements. The team understood what we needed and developed a solution that works practically for our organisation and our people.”

Omer Mukhtar
ICT Solutions Specialist – Cybersecurity & Test Solutions
Data Edge

A More Efficient Way of Working

For Data Edge, digitalising its ISMS has created more than a new way of storing information. It has provided a connected, structured and practical system for managing information security, helping the organisation maintain its records, support audit processes and give employees easier access to the information they need.

By combining ISO expertise with Microsoft 365 digital solutions, CG Business Consulting helped Data Edge turn a collection of spreadsheets and documents into a scalable digital management system designed around how the organisation works.

Talk to us about your ISMS digital challenges and we can walk you through our solutions for your organisation. Book in a half hour free consultation with our team of experts, simply email us at hello@cgbc.ie

Book your free consultation HERE.