From Fragmented IT to Fortified Security: How BizAway Secured ISO 27001 Certification with Google Workspace and JumpCloud

BizAway is a fast-growing hybrid travel agency that simplifies business travel with its bespoke booking platform, an operation that involves handling sensitive client data on a daily basis. As a result, cybersecurity for BizAway isn’t just a feature—it’s the foundation of their business.

However, their path to top-tier security was blocked by their previous infrastructure—a patchwork of risks. 

We had an Active Directory server that was serving the Microsoft Windows users mainly located in the main office. For everyone else, including Apple MacOS users, devices were unmanaged, with “really no control over the user, the MDM, software and patch management.

Luca Papinutti, IT & Security Coordinator, BizAway

Recognizing this as an unsustainable security liability, in 2023, BizAway made the pivotal decision to switch from Active Directory to JumpCloud. To formally validate their commitment and earn the highest level of client trust, they set their sights on the globally respected ISO 27001 certification—a goal that placed their security infrastructure to the ultimate test.

The Journey to Certification: A Modern Approach Impresses Auditors

When the ISO 27001 auditors began their assessment, they came with traditional expectations asking to see BizAway’s Active Directory. BizAway surprised them by unveiling a modern, cloud-native infrastructure built on Google Workspace and JumpCloud.

The auditors found every required security control—from patch management and device encryption to user identity and conditional access— managed and monitored from a single, cohesive platform. This centralised control, a stark contrast to siloed legacy systems, resulted in a smoother audit. “It was like a big bonus,” Luca notes, “and helped us obtain ISO 27001 more easily.”

The Foundation for Success: A Seamlessly Integrated Security Ecosystem

The true strength of BizAway’s digital security strategy lies not in a single product, but in the seamless integration of two powerful platforms.

Google Workspace: The Secure, Intuitive Core

Google Workspace, initially chosen for its user-friendly interface, became a cornerstone of BizAway’s security posture. Luca calls it a more cohesive system than alternatives that feel like “a patchwork of disparate technologies..” arguing its simplicity leads to stronger security in practice. Because it’s easier to configure, he notes, “it is more secure as you can get all the settings, information & reports in an easier way,” preventing misconfigurations.

JumpCloud: The Unified Directory & Security Backbone

JumpCloud acted as the central directory and device management engine, giving BizAway the comprehensive control necessary to meet ISO standards and become the linchpin for proving compliance.

Today, BizAway manages its entire infrastructure through JumpCloud, including:

A Partnership for Success: The Role of Dinova

BizAway’s successful transition was also powered by their strategic partnership with Dinova. While the JumpCloud deployment was handled in-house, BizAway relies on Dinova for crucial expert support. “They are a really great partner and every time that we have an issue, we open a ticket and they answer quickly,” Luca shares.

This powerful combination of technology and partnership enabled BizAway to achieve its critical security certification and build a scalable, efficient IT environment.

Don’t be afraid to move away from Microsoft products. Even a successful company such as BizAway has done this and we are really thriving using Google Workspace and JumpCloud.

-Luca Papinutti IT & Security Coordinator of BizAway