{"id":2940,"date":"2026-07-13T11:15:29","date_gmt":"2026-07-13T09:15:29","guid":{"rendered":"https:\/\/www.aktiva-info.com\/?p=2940"},"modified":"2026-07-13T11:16:17","modified_gmt":"2026-07-13T09:16:17","slug":"aktiva-info-awarded-eu-cybersecurity-grant-our-path-to-iso-27001-certification","status":"publish","type":"post","link":"https:\/\/www.aktiva-info.com\/en\/aktiva-info-awarded-eu-cybersecurity-grant-our-path-to-iso-27001-certification\/","title":{"rendered":"Aktiva Info Awarded EU Cybersecurity Grant: Our Path to ISO 27001 Certification"},"content":{"rendered":"\n

We are pleased to announce that Aktiva Info d.o.o. is one of 134 Croatian companies awarded grant funding under the call “Strengthening Cybersecurity of Micro, Small and Medium Enterprises (SMEs)”<\/strong>, implemented by CARNET’s National Coordination Centre for Industry, Technology and Research in Cybersecurity (NKS)<\/strong>. The program is worth approximately \u20ac2.9 million in total and is co-funded by the European Union.<\/p>\n\n\n\n

Grant agreements were presented to recipients at an award ceremony held at the National and University Library in Zagreb.<\/p>\n\n\n\n

Why we applied<\/h4>\n\n\n\n

Our software runs mission-critical operations for our clients every single day. S24 WMS<\/strong> manages warehouse operations for more than 250 logistics, distribution, and manufacturing companies \u2014 including Lagermax, Hrvatska Po\u0161ta, Ralu Logistika, and Vetropack. Our ticketing system for maritime operators<\/strong> processes bookings and ticket sales in passenger shipping.<\/p>\n\n\n\n

Inventory data, orders, dispatches, bookings, and ERP integrations flow through our systems continuously. Every one of those data points represents business value we are obligated to protect.<\/p>\n\n\n\n

Cyber threats targeting European SMEs are growing year over year, and the regulatory landscape \u2014 above all the NIS2 Directive<\/strong> \u2014 is placing increasingly strict requirements on companies in the supply chains of critical sectors like logistics and transport. As a software vendor to those sectors, we’re not waiting for security to become an obligation. We want it to be our competitive advantage.<\/p>\n\n\n\n

What the project covers<\/h4>\n\n\n\n

The project consists of three main activities:<\/p>\n\n\n\n

1. ISO\/IEC 27001 certification<\/strong><\/p>\n\n\n\n

We are establishing a complete Information Security Management System (ISMS)<\/strong> in line with the international standard ISO\/IEC 27001:2022. This includes risk assessment, information asset classification, security policies and procedures, access management, secure software development (secure SDLC), and business continuity planning. The process concludes with an independent certification audit by an accredited certification body.<\/p>\n\n\n\n

For our clients, this means Aktiva Info’s security practices will be formally documented, regularly audited, and confirmed by an internationally recognized certificate \u2014 not just a matter of internal trust.<\/p>\n\n\n\n

2. Penetration testing<\/strong><\/p>\n\n\n\n

Independent security experts will conduct penetration tests<\/strong> of our key systems \u2014 the S24 WMS platform and the maritime ticketing system. The goal is to identify and remediate vulnerabilities before anyone else finds them. Test findings will feed directly into our development process and the ISMS security controls.<\/p>\n\n\n\n

3. Cybersecurity awareness program<\/strong><\/p>\n\n\n\n

Technology is only part of the security equation \u2014 the majority of successful attacks still begin with human error. That’s why every Aktiva Info employee will complete a structured security training program<\/strong>: from recognizing phishing attacks and handling data securely to secure software development practices for our engineering team.<\/p>\n\n\n\n

What this means for our clients<\/h4>\n\n\n\n

Concretely, three things:<\/p>\n\n\n\n