You may have noticed that we used the word Active twice in the title of this principle, that was deliberate. When it comes to your Information Security Management System relaying on passive, reactive security steps is going to be pretty disastrous for your organisation, waiting for something to happen ( or worse still if something happens and you d...

With everything that is going on in the world at the moment with the Covid-19 pandemic the move to working remotely has exploded. People have, to be fair, worked remotely for a long time and been successful with it, but it's not normally been the whole team, it's normally been a few people and even then they would pop in for face to face meetings o...

When you think about your information systems, repositories and sources of information within your organisation have you built security into them or is it a bolt on after the fact? Is it there at all? Keeping in mind that Information Security is about more than just your IT systems and what's stored there but about all information have you built in...

Understanding the risks in your organisation is a key part of being able to effectively manage it and its part of the reason that the ISO management systems now take a risk-based approach to things. ISO27001:2015 is no different to the other standards in that respect, if you want to have an effective Information Security Management System (ISMS) th...

Imagine you are in the Scottish Highlands in the late 1500's between you and your extended family or Clan as we call them, you have a bit of land and around 600 cattle and sheep. Now imagine that another clan have decided that for what ever reason to have a bit of a battle. Typically, these battles were comprised of hundreds of people all on foot w...

Joe walked into a doctor's surgery convinced he was not long for this world. He sat patiently waiting for the doctor, who was running 30 minutes late, but finally it was his turn. The Doctor, an elderly and portly man with a beard that would make Santa proud, asked what the problem was. Joe explained that everywhere hurt, he said that when he touch...

The Mango Minute  The Mango Minute is a serious of video's that will take you through elements of the Mango QHSE software which is the perfect platform to manage all of your compliance requirements including Quality, Health & Safety and Environmental Management. and give you some hints on using the system in your organisation more effectiv...

When people start out on the journey for ISO27001 sometimes they can forget to stop and really think about the design of their Information Security Management System (ISMS), eventually it catches up with them and it happens. One factor in that design that most seem to gloss over however is the Values that the system is based around and that's what ...

I attended a client's monthly management meeting the other week and it was interesting to say the least. The session was scheduled for an hour (so in my head I'm thinking that's a bit short) and it was to cover operational performance and a new product they were designing for a new market they were looking to enter. I'd asked in advance why they we...

The Mango Minute  The Mango Minute is a serious of video's that will take you through elements of the mango QHSE software and give you some hints on using the system in your organisation more effectively to cover a wide range of areas. Using Mango QHSE inside Microsoft Teams  Mango QHSE is the perfect platform to manage all of your compli...