Standards & certification · Governance, risk & privacy · Organizational development
Management systems that meet the standard - and that the organization actually works by
Most organizations I walk into are already certified. There are procedures, there is a folder, there is a certificate on the wall. What is missing is the connection between what is written and what actually happens on the day after certification.
I work with public and private organizations in Israel - manufacturers and service providers - implementing management systems under international standards and local regulation, and building the management layer that holds them together: risk, controls, measurement and work plans.
Why a local consultant
Israeli organizations operate under a distinct regulatory layer: Amendment 13 to the Privacy Protection Law, the Israeli Standards Institution certification ladder, and sector regulators with their own requirements. International frameworks map onto this layer, but the mapping is not automatic. That translation is a large part of what I do.
Three core areas
Area 1
Quality, standards and certification
ISO 9001 and the Israeli standards, internal audits, and preparation for certification - including the transition to the 2026 edition of ISO 9001.
Area 2
Information security and privacy
ISO 27001 and its family, readiness for SOC 2 and C5, and outsourced Data Protection Officer services under Amendment 13.
Area 3
AI governance
ISO 42001 implementation, including a full mapping of AI use across the organization. One implementation has already passed its certification audit.
Background
- Independent
- Consulting practice since 2012
- Lead auditor
- Certified since 2008 (IQC)
- Security
- CISO, Bar-Ilan University, 210 hours, 2021
- Privacy
- DPO, Bar-Ilan University, 60 hours, 2021
- AI
- AI Engineering programme, Hebrew University, 2026
- Judging
- Israel National Quality Award, since 2011
Start with a short call
A short call is usually enough to establish what exists today and what is missing. No commitment, no proposal.