Baltum Bureau

Baltum Büroo (also presented as Baltum Bureau / BCERT) is a company that provides management systems assessment and ISO certification services. The organisation lists an office in Estonia and an office in the United Kingdom and indicates additional offices in the United States, Ukraine, Portugal, and Poland. Services and client work are presented for national and international organisations, with auditors operating in multiple countries.

Services and Capabilities

• ISO management system certification: administration of certification processes for standards such as ISO 9001, ISO 14001, ISO 45001, ISO 22301, ISO 37001, ISO 50001, IATF 16949, ISO 41001, ISO 26000, ISO 28000 and related standards.
• Information security and privacy compliance: assessment and certification services for ISO/IEC 27001, ISO/IEC 27701 and related frameworks; services listed include GDPR and CCPA compliance activities.
• Cybersecurity technical services: delivery of penetration testing, vulnerability assessments, virtual Chief Information Security Officer (vCISO) engagements, cloud security reviews, and security tooling advisory for SIEM, EDR/XDR, DLP and PAM/IAM implementations.
• Sector-specific certification programs: certification support for translation agencies (ISO 17100, ISO 18841, ISO 18587), education providers (ISO 21001, ISO 29990), medical device and clinical standards (ISO 13485, ISO 14155), food safety and hotel standards (food safety standards, ISO 22483), and contact centre standards (EN 15838).
• Training and personnel certification: delivery of online courses on ISO standards and personnel certification for staff competence in relevant management systems.
• Audit and management system assessment: third-party or certification body-style audits and project management audits to evaluate conformity with specified standards.

Industry Focus

• Information technology and cybersecurity: performance of information security management system certification and technical security assessments for organisations handling sensitive data.
• Healthcare and medical devices: certification-related services for medical device quality and clinical trial management standards.
• Education and training providers: assessment and certification of learning organisations against international education management standards.
• Hospitality and food services: certification services addressing hotel quality and food safety management requirements.
• Translation and contact services: conformity assessment for translation agencies and contact centres to recognised service standards.

Selected Organisations and Case Examples

• ISO/IEC standards bodies and protocols: work described around certification to ISO 9001, ISO 14001, ISO/IEC 27001, ISO/IEC 42001 and other ISO management system standards, indicating execution of certification processes for clients seeking these standards.
• Regulatory and compliance frameworks: services documented for GDPR, CCPA and PCI DSS compliance activities, including assessments and certification preparation.
• Industry consortia and schemes: reference to Cloud Security Alliance (CSA) and CryptoCurrency Certification Consortium (C4) as frameworks or schemes aligned with information security and crypto-related conformity services.

Technology and Delivery Approach

• Assessment and audit delivery: use of management-system audits and assessments to evaluate client conformity with specified standards and to issue certification decisions or support certification readiness.
• Security testing and tooling: implementation of technical security evaluations such as penetration tests and vulnerability assessments, and advisory on security tooling including SIEM, EDR/XDR, DLP and PAM/IAM solutions.
• Remote and distributed delivery: provision of online courses and personnel certification, and deployment of auditors across multiple countries, indicating a combination of remote and on-site assessment methods.
• Standards-based processes and documentation: delivery of compliance results through documented management systems, procedures and certification records aligned to the requirements of recognised standards.