Information security & management systems

We help companies manage information security and quality.

We assess where you stand today, set out the next steps and build the system with you that you can take to the audit, whether that is ISO 27001, ISO 9001, E-ITS or AQAP 2110.

Our mission

To provide organisations of every size with accessible information security and quality management systems.

27k

What does 27k mean?

The name 27k Advisory is inspired by „27k“, the informal shorthand for the ISO 27001 information-security standard. On one hand it nods to a well-known framework, yet at the same time we don't confine ourselves to the boundaries of standards alone.

For us, 27k means a broader view of information security – a balance between people, processes and technology. If even one of these three is weak, security as a whole does not hold. That's why, in addition to meeting requirements, we also work to ensure the solutions genuinely work in everyday work and life.

Standards are an important foundation – and real security is born from applying and adapting them thoughtfully to an organisation's needs. 27k is our simple way of saying: information security must work both in real life and on paper.

The same logic applies to quality and environmental management. ISO 27001, ISO 9001 and ISO 14001 share a common structure, so they can be combined into one management system – with one risk management process, one document control and one internal audit. That reduces duplicated work and the number of documents.

Services

Information security, quality and management systems

From assessment and training to meeting ISO 27001, ISO 42001, ISO 9001, ISO 14001 and AQAP 2110.

Information security

ISO 27001, ISO 42001, E-ITS, audits, security manager as a service and training.

Quality and management systems

ISO 9001, ISO 14001, AQAP 2110 and Head of Quality as a service – for manufacturing, technology and defence companies.

See all services
Team

Meet our team

Information-security and quality management specialists with long experience and a practical mindset.

Janar Randväli

Janar Randväli

Information-security consultant, co-founder

Janar is a consultant and co-founder at 27k Advisory with over 20 years of experience in the security and information-security field, including around 15 years in leadership roles. He helps companies manage security systematically, assess risks and prepare for ISO 27001 audits.

Read more

In the security and information-security field, Janar has worked for over 20 years, around 15 of them in leadership roles. During that time he has worked across information security, physical security, risk management, E-ITS, ISO 27001 and auditing.

He has versatile experience in the defence sector, the public sector and the private sector. He has helped organisations manage security systematically, assess risks and prepare for audits, and has created practical principles and ways of working that genuinely work.

He believes it is important that security is understandable, manageable and usable in a company's everyday work. A good result does not come from documents or technology alone, but from how people, processes and management work together.

He follows the principle that good information security should support the business, not hinder it.

Marko Kivimäe

Marko Kivimäe

Information-security consultant, co-founder

Marko is a co-founder and certified information-security consultant (ISO 27001 Lead Auditor, ISO 27005 Senior Lead Risk Manager, ISO 42001 Lead Implementer) who moved from leading Smart-ID information security to advising companies, combining a strong technical background with the ability to bring technology and people together.

Read more

Marko has over 20 years of experience in the telecommunications, IT and cyber-security sectors, with a journey that began at a telecom helpdesk. He has worked with business-critical, high-demand IT infrastructure, helped bring the Smart-ID service to market and was one of its lead systems engineers. At one point he took on responsibility for Smart-ID information security.

Marko's background is working with people – once through customer support and later in information-security consulting. He has a strong technical background as a Linux and PostgreSQL/Oracle database administrator, and has also managed Java application servers. He is also a MikroTik enthusiast, holding several certificates (MTCNA, MTCSE, MTCIPv6E).

At 27k Advisory, Marko provides information-security consulting, helps companies prepare for ISO 27001 and ISO 42001 audits, delivers security training and supports technical topics too – always securely and in line with the standards.

Karina Bärg

Karina Bärg

Quality and management systems expert

Karina Bärg is an experienced Quality, management systems and organisational scaling expert with more than 20 years of experience across technology, electronics, manufacturing and deeptech companies. She has worked in international industrial organisations, fast-growing technology companies and the public sector, leading the development and implementation of Quality, strategy, risk management and management systems.

Read more

Karina’s previous experience includes senior roles at Skeleton Technologies, where she was responsible for Quality management and the development of Quality systems across different stages of technology and manufacturing scale-up. Her industrial background also includes electronics and manufacturing companies such as Ericsson, Stoneridge Electronics and Eolane. She has also led strategy and Quality at the Information Technology Center of the Ministry of Finance.

Karina is an IRCA-certified management systems auditor and an active consultant. As a subcontracted auditor for Bureau Veritas, she regularly conducts independent audits across organisations and industries. This gives her broad practical insight into how companies of different sizes and levels of maturity actually manage Quality, risk and management systems. Alongside auditing, Karina advises both scaling technology companies and larger organisations on the development of Quality and management systems.

Her expertise combines product quality, manufacturing quality, supplier quality, product assurance, compliance, risk management and scalable management systems. Her experience includes FMEA and quality planning, product development and industrialisation quality, supplier qualification and auditing, validation, CE and UL compliance, as well as management systems based on ISO, IATF and AQAP requirements.

Today, Karina works primarily with deeptech and technology companies moving from product development through industrialisation and production towards international scale. Engagements can range from an independent audit, FMEA, quality plan or a specific compliance challenge to building an end-to-end Quality and management system or taking on a Fractional Head of Quality role.

Karina’s approach is based on the principle that as a company scales, the answer is not simply to grow the Quality function. Quality needs to be embedded into product development, manufacturing, supplier management and day-to-day business operations, using automation where it reduces administrative work and enables the system to scale with the business.

Kristjan Ok

Kristjan Ok

Co-founder

Kristjan is a co-founder of 27k Advisory whose 20-plus-year journey from IT helpdesk to company co-CEO and information-security manager in the financial sector has taught him to see both the technology and how decisions truly affect a business – plus the knack of explaining complex security topics simply.

Read more

Kristjan's practical foundation comes from years of working with business-critical IT infrastructure, where system availability and security are decisive. That experience taught him to see which solutions truly work and where the biggest risks lie.

Jokingly, Kristjan calls himself a „failed specialist“ – his hands no longer reach deep into the technical work, but that is exactly why he can lead those who do it. He has also trained various organisations on IT and information-security topics.

At 27k Advisory, Kristjan is responsible for various management topics and is a partner to clients who want to make clear, well-considered decisions to improve their company's cyber security.

Blog

Thoughts on information security

Loading articles…

Contact

Get in touch

Let's talk about your security

Phone: +372 552 8000
Email: info@27k.ee
Business name: 27k Advisory OÜ
Registry code: 17519675
VAT no.: EE102991787
Address: Palli 13A, Tallinn, 11623