Three weeks ago, someone from my network asked whether I'd support Prismedi with their ISO/IEC 27001 certification.
My answer: gladly.
On one hand, I bring the professional experience. On the other, the team is genuinely likeable, and what Prismedi is building in the medical space is meaningful and exciting.
We've now started. The setup: Confluence, Jira and Claude Code.
Yesterday, I used Claude Code to build a comprehensive overview based on the Statement of Applicability, while also mapping out project management. Among other things, it includes:
- processes to be described
- required tasks
- records to be provided
- around 140 lines in total
This overview was then mirrored into Jira tickets. The requirements for each ticket's content were added automatically too.
Time spent on this initial groundwork: about two hours.
About ten years ago, I took essentially the same approach on a similar project: an overview in Confluence, task tracking via Jira. Except back then, most of it was manual work. From what I remember, the setup itself took about five weeks. To be clear, that wasn't five weeks of pure ISO work — but the difference in speed is still enormous.
What matters here: the automatically generated content is clearly marked as such. We gave it a rough review first, and we go into the professional detail during the individual sprint plannings. That's where it gets checked and adjusted.
So AI doesn't replace expertise or responsibility. But it can speed up the administrative groundwork so much that more time is left for the questions that really matter.
And that's exactly what I find pretty wild right now.