Business Simulations is accredited with ISO/IEC 27001 certification
By Emily McDaid, Jun 11, 2025 Last updated Jun 17, 2025
Following a weeks-long cyber security audit process, Business Simulations has earned its ISO/IEC 27001 certificate. This demonstrates the company’s commitment to implementing robust methods of data handling, to give customers around the globe peace of mind with regards to how their data is held.
Business Simulations brings more than two decades of experience developing leaders, managers and emerging talent with immersive business simulations. The company runs challenging yet enjoyable business games for some of the world’s largest companies, such as Johnson & Johnson, Spar, GSK, and Volkswagen.
This globally recognised standard for information security management demonstrates to our customers that we are a secure organisation. Because we work with many blue chip companies across the globe, they require that we reach the highest levels of privacy and security in our data handling.
Scott Thompson, MD of Business Simulations
Only one in five of the UK’s largest businesses (those larger than 250 employees) have been accredited with ISO/IEC 27001 certification. Gaining ISO/IEC 27001 certification ensures the strictest levels of data control within a business, meanwhile helping with attracting larger customers, by demonstrating the secure handling of sensitive data. The benefits include:
- Resilience to cyber-attacks
- Preparedness for new threats, organisation-wide
- Data integrity, confidentiality and availability
The overall process ensures a company’s cyber preparedness through the following steps:
- Gap analysis
- Readiness audit
- Developing information security policy, procedure and frameworks
- Creating an information security management system
- Staff awareness training
- Implementation of controls
- Internal audit
- Management review
- External audit
- Certification with ISO/IEC 27001
'This is one step in our continuous journey of security awareness,' said Scott, 'and we’ll continue to further secure our processes. One auditor commented that we were one of the most well-prepared small businesses that he had seen to date, and this exemplifies the level of attention to detail we pay to all our work. Our customers are some of the world’s largest organisations and government bodies, and they rightly expect the most tightly controlled security processes.'