ISO certifications for Mendix projects: how to meet the requirements far more easily

For organisations that develop IT solutions, ISO certifications can be of great value. With an ISO certification you demonstrate that the systems and processes within your IT project meet international standards. The most common ISO standards for IT projects are ISO 27001 (aimed at information security) and ISO 9001 (aimed at quality management). To qualify for an ISO certification you have to meet quite a few requirements. That can be a real challenge. Do you work with Mendix? Then there is a way to make this much easier. In this article we explain how that works.

Why would you want to be ISO certified?

Obtaining an ISO certification brings several benefits. First of all, the ISO standards force you to raise the quality and security level of your IT solution. That is always a good thing to aim for, of course. A certification can also strengthen your competitive position. For many clients, demonstrable quality and security are important factors in choosing an IT solution. On top of that, there are quite a few organisations that are only allowed to, or only want to, work with ISO-certified solutions. We often see this with organisations in the financial sector, healthcare and government, for example.

Meeting the requirements of ISO standards becomes easier with JamOps

So for an ISO certification you have to meet quite a few requirements. Processes have to be implemented that safeguard the quality and/or security of your IT solution, and you have to show how you mitigate certain risks. It is also important that every change within your IT project is traceable.

Would you like to take a shortcut there? Then consider using JamOps. This tool enforces important standards in the area of security and quality by automatically checking the code after every commit. JamOps was developed with the most important ISO standards in mind, which means you meet a great many requirements as soon as you start using JamOps.

The ISO standard captured in rules that are checked after every commit

JamOps works on the basis of rules. We have captured every requirement of ISO 27001 and ISO 9001 that we can automate in such rules. After every commit, JamOps checks within a minute whether these rules have been met. If not, JamOps blocks the pipeline, so it simply cannot be deployed. The strength of JamOps lies in this 'zero tolerance' approach. Developers are forced to resolve issues immediately and are trained to always work according to the standards and agreements. As a result, with JamOps you immediately meet a large part of the requirements and you can document and demonstrate that easily too. We can also add or adjust rules for you if you have different requirements.

More to safeguard the quality and security of your application

JamOps does more than check rules. After every commit, JamOps also runs unit tests and security scans.

Unit tests

When you develop a unit test, you state which outcome you expect after a piece of code has run. Does the outcome of the unit test not match what you expected? Then something is probably wrong. JamOps automatically blocks the pipeline so you can resolve the problem.

Security scans

Every new piece of code can cause a security issue. To prevent that, JamOps runs a number of automatic tests after a commit. Those tests consist of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA). Here too, the pipeline is blocked if there are security issues. That way you prevent things going wrong in your live application.

Want to know more about JamOps?

Here you will find more information

You can of course also get in touch with us. We would be glad to tell you about the options.