Tekkeköy ISO and Standards Compliance Consulting

Standards are earned on site, not on paper. SMB Teknoloji prepares your business for the certification audit of the standard you choose: we find the gaps, write the documents, put the technical controls in place and stay with you until audit day.

We do not issue certificates. Certificates are issued by an independent, accredited certification body of your choice. A consultant not certifying its own client is an impartiality rule and your safeguard.

Which standards

• ISO/IEC 27001 information security management and ISO/IEC 27701 privacy information management
• Data protection (KVKK/GDPR) technical and organisational measures; legal texts with your lawyer, technical side from us
• IEC 62443 cybersecurity for industrial automation and control systems
• CE technical file: Machinery Directive 2006/42/EC, ISO 12100 risk assessment, ISO 13849-1 and IEC 62061 safety functions, IEC 60204-1 electrical equipment
• ISO 50001 energy management, together with the metering and monitoring layer
• ISO 9001 quality management, ISO 22301 business continuity, ISO/IEC 20000-1 IT service management
• ISO/IEC 42001 AI management system

How we proceed

1. Gap analysis: Every clause is compared with the current state; gaps become a prioritised list.
2. Scope and risk assessment: Processes, sites and systems in scope are defined; asset inventory and risk register are prepared.
3. Documentation: Policies, procedures, instructions, forms and records are written for how your business really works; no template filling.
4. Technical controls: Firewall rules, backup and restore tests, access management, log collection, network segmentation, machine safety circuits and energy metering points are implemented.
5. Training and awareness: Role-based training for staff and management, with records.
6. Internal audit and management review: A rehearsal of the audit; findings are closed.
7. Audit support: Technical questions during the certification body's audit are answered together.
8. Maintenance: Preparation for surveillance audits and keeping records current.

Why an IT and automation firm?

For information security, OT security and CE, the auditor looks at the site, not just the documents: is the firewall really configured that way, does the backup restore, is the emergency stop circuit in the right category? When the team writing the documents is the team building the system, the gap between what is written and what is done disappears.