Well, there are many businesses in the game of selling ISMS guidance, tools and other support. As the consumer of their services, first of all, develop your own plan, decide how you want to use any external services, and make sure you remain in charge of their participation and the development of your ISMS. This way, you stay in charge of your business and understand better how the ISMS is a tool to help you do that. It is a part of your internal control system – and the ISMS management standard requires top-level management support. Next, ensure that the business you choose to give you support really understands what the ISMS concept is about, and has a range of services from basic introduction to the concepts, through training, assistance with policy development, and maybe some tools to help you. Check also their track record, whether they are themselves certified auditors, whether they participate in the development of these standards and whether they have an ISMS themselves. We’re not saying that these are ‘musts’ – sometimes extensive experience is worth more than a piece of paper declaring a certified status, but our point is, look for strength overall, understanding of the practical application of the ISMS standards, not just theoretical knowledge, and match it to your needs. We’d like you to take a look at Zygma and see how we might be able to assist you. We think we can fulfill these requirements and provide a team of size and competence to meet your needs. We look forward to hearing from you – we hope that at the least this ‘QYSA’ list has made you more aware of the merits of having your own ISMS. Good luck with your endeavours in that direction.