National Joblink (NJL) is a Registered Training Organisation delivering training, employment and workforce development services across Tasmania, Queensland and the Northern Territory. As a provider delivering Commonwealth Government-funded services, NJL was required to demonstrate a high level of information security governance and achieve ISO 27001 certification within a strict timeframe.

The Project Lab was engaged to help strengthen NJL's Information Security Management System (ISMS), identify compliance gaps and support certification readiness. Working closely with the organisation's leadership team, we reviewed existing controls, improved governance processes and helped establish a stronger foundation for ongoing information security and risk management.

Challenge: Achieving certification within strict timeframes

As a provider delivering Commonwealth Government-funded services, National Joblink was required to meet information security and risk management requirements, including ISO 27001 certification.

National Joblink were under tight timeframes to achieve certification and required assistance to refine their risk assessment, effectively challenge and test their information security controls implement a robust internal auditing and management review process.

• Retain existing Commonwealth Government contracts
• Increase revenue from new Commonwealth Government contracts
• Improve information security management controls and systems

Solution: Information Security Review and Certification Support

• Reviewed and validated the Statement of Applicability.
• Assessed existing security controls and identified areas for improvement.
• Conducted a gap assessment against ISO 27001 requirements.
• Supported remediation activities to address identified risks and compliance gaps.
• Established internal audit and management review processes.
• Provided advice on technology improvements and information management controls.

The gap identification led to the provision of specific technical services including:

• Migrating from a file server to a Microsoft cloud-based SharePoint and hardening / testing that site to improve security, access control and information management.
• Decommissioning of the on-premise file server.

Following successful ISO 27001 certification The Project Lab consultants have also assisted NJL develop and implement continuous improvements to the organisation’s information and cybersecurity controls.

Project Results

• ISO 27001 certification achieved
• Government contract eligibility retained
• Reduced cybersecurity risk
• Improved audit capability
• Stronger information governance

"Without the timely support received by The Project Lab, we would not have been successful in obtaining out Right fit for Risk accreditation within the required timeframe. As a result, we were one of only a few dozen organisations nationwide that did not require an extension of time." - Emma Dickens CEO, National Joblink

Need support with information security, cybersecurity or ISO 27001 certification?

The Project Lab works with organisations to strengthen governance, manage risk, prepare for certification and implement practical information security improvements that support long-term operational success.

Get in touch to discuss your information security requirements.