Insights
Practical articles on ISO standards, certification audits and preparing your organisation.
Can a One-Person Company Get ISO Certified?
ISO certification is often associated with larger organisations.People picture departments, management teams, internal auditors and dozens of employees following documented procedures.So when a director runs a consultancy, technology company or specialist service...
ISO 9001 or ISO 27001: Which Should a Professional Services Business Get First?
For many professional-services businesses, the first conversation about ISO starts with a customer questionnaire.One client asks whether you hold ISO 9001. Another wants to know whether you are ISO 27001 certified. Then a tender lands that asks for evidence of both...
Can a New Business Get ISO Certified Without Years of Trading History?
A newly formed company finds a contract it wants to bid for. The opportunity looks ideal, but the supplier requirements ask for ISO 9001 certification. That creates an obvious problem: How can a new business become ISO certified when it hasn’t been operating for...
Can a Fully Remote or Home-Based Business Get ISO Certified?
More businesses now operate without a traditional office. Employees work from home. Meetings happen on Teams. Documents sit in SharePoint or Google Drive. Customer systems are cloud-based. Some companies may not have a permanent business premises at all beyond a...
We Already Have Cyber Essentials Plus – Do We Still Need ISO 27001?
For many UK businesses, Cyber Essentials is the first formal cyber security certification they achieve. Some then progress to Cyber Essentials Plus, complete the technical assessment and quite reasonably think: “If we’ve already got Cyber Essentials Plus, why...
Management of Change: The ISO Requirement Businesses Commonly Forget
Businesses change constantly. A new software platform is introduced. A supplier is replaced. A team is reorganised. A company moves premises. New equipment is installed. A process that has worked for years is redesigned. Most of these changes are made for good...
Do SaaS and Technology Companies Need ISO 27001 to Win Larger Contracts?
For many software and technology businesses, the first serious conversation about ISO 27001 does not start with an auditor.It starts with a customer.A promising enterprise prospect sends over a security questionnaire. Procurement asks about information-security...
Does Your ISO Certification Body Need to Be UKAS Accredited?
If you have started comparing ISO certification providers in the UK, you will probably come across the term UKAS accredited very quickly. Some providers emphasise it heavily. Some tender documents specifically ask for it. Others simply ask for ISO certification...
What Happens If Your ISO Certificate Expires?
Most businesses put a lot of effort into achieving ISO certification. The system is implemented, the audits are completed, the certificate is issued – and then ISO gradually becomes part of normal business life. Until somebody notices the expiry date. Perhaps a...
What Should Your ISO Certification Scope Actually Include?
When a business starts ISO certification, a lot of attention naturally goes to the standard itself. Do we need ISO 9001? Should we add ISO 14001? How long will certification take? But there is another decision that can have a major impact on how useful your...