For many organisations having any form of information security system is new, and that can make it a little challenging. It means that you are having to graft your new systems onto what you already have, which is tricky. However, there will come a point that the next system you need isn't one you had before you system, its new and so the very best ...

AS9100 clause 7.4 Communication is a small and innocuous clause, there really doesn't seem too much to it on the face of it. This clause in Rev D of the AS9100 standard for Aviation, Space and Defence organisation is all about ensuring that those within your organisation and outside of it get the right level of communication about your quality mana...

One of the great things that we see happening in the compliance world at the moment is an upsurge in the interest in gaining accreditation to ISO14001 for environmental management systems (EMS). There a lot of factors generating this interest from contractual requirements including the need for environmental sustainability or certification to busin...

While this annex clause of ISO27001 for Information security management systems (ISMS) is named Communication Security, think of it more as the security linked to how you move your information around both internally and externally of your organisation. The clause is split into two parts which really link to that internal & external thinking. A1...

I overheard a conversation in a café the other day between a few people sitting round a table in what I presume was an off site catch up for the management team. They were discussing some of the challenges that they were having and how tough things had been throughout the covid pandemic for them. They had managed to get through by being really cash...

Although AS9100 REV D requirements for your Quality Management System (QMS) is built on top of the ISO9001:2015 standard, there are a few areas where the requirements of the Aerospace standard are different or there are additional requirements, AS9100D Clause 7.3 for Awareness is one oof those areas.   Clause 7.3 - Awareness  This section...

Annex 12 – Operational Security for your ISO27001:2013 Information Security Management System (ISMS) is a pretty substantial clause since it's all about preventing the loss or availability, integrity and importantly confidentiality of your business information. By substantial we mean there are 14 separate elements for you to think about controls th...

If I knew then what I know now… The inference from that little phrase is that you would obviously make a different decision and so things would turn out better. Often however that's not the case, certainly not with people at work. We all hire people who aren't suited for the company, they aren't necessarily bad people, it's just they don't fit the ...

This Week's Question  This is a question that comes up a lot in discussions when we're implementing some lean with clients, "If we want to have a lean culture what is more important, respect for people or continuous improvement? Surely, they are both equally important? " The Feedback No! It's kind of chicken in the egg, so if you think about i...

Within the AS9100 REV D standard Competency (Clause 7.2) and Awareness(Clause 7.3) are split into 2 separate clauses, that makes sense if you look at competency as purely skill or knowledge based but you do have to ask if it is to have any Competency without Awareness (or Communication!). As an organisation it';s for you to decide how you manage it...