An Interview with our Quality Assurance and Compliance Lead, Dr Robert Kieser
As we celebrate BioInformatiCo’s achievement of ISO/IEC 27001:2022 certification, we want to recognise the dedication and leadership that made this milestone possible. At the heart of this journey was our Quality Assurance & Compliance Lead, Dr Robert Kieser, who guided the team with vision, persistence, and commitment to excellence.
Dr Robert Kieser, Quality Assurance & Compliance Lead
We asked Dr Rob Kieser to share some reflections on the experience:
What was the most challenging aspect of leading BioInformatiCo through the ISO certification process, and how did the team overcome it?
The interesting thing about having a mature quality management (QMS) system already in place is that it’s both an advantage and a challenge when pursuing ISO certification. ISO essentially asks you to crystallise your information security management system (ISMS) and ensure it meets rigorous international standards. But here’s the thing – your ISMS can’t exist in isolation. For it to actually work, it needs to integrate seamlessly with the finely-tuned QMS procedures you’ve already developed.
That integration point required serious thought and careful consideration. We didn’t want compliance theatre – we wanted procedures that people would genuinely embrace and execute because they actually improve the service our clients receive. Finding that sweet spot between meeting ISO requirements and maintaining our operational effectiveness took some real problem-solving.
What does achieving ISO certification mean to you personally?
It’s effectively an example of how implementation only happens with true organisational alignment. ISO certification isn’t something you can force through or accomplish in silos – it requires everyone moving in the same direction.
What made this possible was genuine buy-in from top-level leadership, department heads, and every team member. When you have that kind of alignment – where everyone understands not just what needs to be done, but why it matters – you can tackle something of this nature and actually make it stick.
Were there any standout moments or contributions during the process?
What’s exciting is watching everything come together. Any implementation project starts with a kick-off phase where you’re still wrapping your head around the full scope and what it means operationally. There’s always that initial learning curve.
The rewarding part comes midway through – when you’ve become comfortable with the requirements and start seeing how all the puzzle pieces fit together. Every company has its own distinct flavour and way of doing things. Success, to me, is finding that balance where we accept the need for additional compliance practices but figure out how to implement them in a way that makes sense for our specific culture and our people.
We didn’t want compliance theatre – we wanted procedures that people would genuinely embrace and execute because they actually improve the service our clients receive.
How will this certification strengthen client and partner confidence?
The beauty of ISO 27001 is that it’s a universal standard. Wherever you go in the world, there’s a shared understanding of what it represents. When clients and partners see that certification on our media, they immediately know we have procedures and systems that meet this globally recognised benchmark.
Whatever your interaction with us might be – whether you’re a new client or a long-standing partner – ISO 27001 represents our commitment to these standards. Our clients and partners can rest assured that we don’t just talk about quality and security – we live and breathe these practices every day.
What’s next for BioInformatiCo in strengthening its quality culture?
Both quality management systems and information security management systems are living, breathing entities that need to evolve constantly. Our company grows every day, and with that growth comes the need for regular check-ins and updates to our core processes.
We’ll keep pursuing additional certifications that demonstrate our capabilities – because ultimately, that’s the goal. We know we do excellent work internally, but we want that excellence to be clearly demonstrable to our partners and clients. This certification is just one step in our ongoing commitment to that transparency and accountability.
