Åtta45 Tryckeri is Sweden's largest printing group and was founded in 1999. It has 17 locations in Sweden, 330 employees, and a turnover of SEK 750 million. The facility in Järfälla produces a wide range of printed materials and is one of Scandinavia's most modern production facilities.
Towards the end of 2022, Åtta45 realized that an ISO 27001 certification was necessary. There was a growing need to formalize its management system in accordance with the ISO 27000 series for information security, as it handled a large amount of personal data about its customers.
– Even though we had internal processes in place, we lacked the structure and proof of compliance that certification provides. In 2024, it became even clearer that we needed to get this work done and ensure that we had the internal control and clear project structure required to succeed, says Fredrik Avenhammar, Information Security Manager at Åtta45, and continues:
– CANEA stood out as a very good choice for several reasons. They acted as coaches throughout the process and provided valuable assistance in creating the necessary documentation. We also had positive previous experience of CANEA's training courses, which gave us confidence.
Well-proven methodology
CANEA always works according to established and proven methods. This provided Åtta45 with clear and useful documentation to support the process. The initial gap analysis was particularly valuable in identifying areas for improvement. After the initial documentation phase, the implementation process was adapted to the current conditions in order to achieve a good structure.
– CANEA's contribution was really good. I appreciated the fine balance between support and structure that they offered. The way they worked, with an initial gap analysis that gave us a clear picture of our current situation, followed by regular weekly meetings, was very effective. The fact that they provided clear procedures and models made the work considerably easier, recalls Fredrik.
– The project management was excellent. I am extremely satisfied with the setup and the continuous and clear communication. It was a smooth and efficient collaboration. I would give it 5 stars out of 5. Personally, I also experienced positive professional development in my own role during the project.
Results and benefits
The implementation of ISO 27001 has led to concrete changes in Åtta45's daily operations. Some measures have resulted in new procedures and increased awareness of information security among all employees. The response has generally been positive, as there is an understanding of the importance of security work, especially in the company's role as a major supplier.
“We have already seen concrete results in the form of winning more tenders where ISO 27001 certification has been a requirement or a strong competitive advantage. It is clear that the certification instills confidence in our customers and strengthens our position in the market. We are really starting to see the business value of the investment, says Fredrik, concluding.
– We plan to take a closer look at how we can further develop our management system with possible additions from the ISO standard and how CANEA's experience and standardized solutions can facilitate this work. For us, it is important that the standards do not just become a paper product but have a real impact on our organization.
"The consultant's expertise was high. It was clear that he has solid experience from similar projects and deep knowledge of information security and ISO 27001. The professional and clear actions throughout the entire process were impressive."
Fredrik Avenhammar, Information Security Manager
Åtta45 Tryckeri
