One of the things that happen when organisation start to build towards implementing their ISO management systems is that they look at the standard and try to figure out where to start. As people tend to do, they move towards the familiar, the bits they believe they know what to do and start there. They implement non-conformance processes, or risk p...

When organisations think about Information Security and what things need to be in place to achieve their ISO27001 Information Security Management System (ISMS) certifications for some reason they mostly forget about the Human Resources function. That is a little strange when you think about it, your relationship with employees and contractors for t...

As we have mentioned before AS9100 REV D is very much focused on understanding the Risks in your Quality Management System and to your organisation plus how you will handle them. It makes sense, working in the aviation, space and defence industries is risky and the products that come out of those industries are perhaps the some of the highest risk ...

Free Template - Process Tracking Letters Template   We have put together a collection of daily Process tracking letters that you can use to track all of your key business processes daily and monthly. This allows you to have a great visual management tool to measure improvement across your organisation. They are really easy to use - print ...

What would you do if one day your accountant walked in and said Ok boss, we have no money and the bank is going to have to step in. They are going to keep us afloat and let us trade out of the problem, but we need to improve what we do. They want us to increase our productivity, reduce our money tied up in WIP & stock, oh, and they will not let...

The interesting thing about the leadership clause of any standard is that it is one many organisation do not pay enough attention to. It tends to be an area where people still believe it is the quality or the safety or the compliance manager's role and so the senior management team take a hands-off approach leaving things to the person they have ha...

Clause A6, Organisation of Information Security, of the ISO 27001 is about providing guidance on the management framework of your Information Security Management System (ISMS). Clause A6 is split into two sections, A6.1 covers the Internal Organisation while clause A6.1 covers Mobile Devices and Teleworking (remote working) which is particularly on...

The great thing about lean is that there is always more to learn, there is always improvement in the thinking, the methodologies, the approaches, and the tools that get used. However, the underlying idea never changes, people somehow manage to complicate it when trying to explain what lean is and that perhaps is one of the things that make people t...

How many times have you heard that a new process or a business change was being done to align to 'best practice'? Other phrases in the same mould are 'that this new process or methodology has worked in many organisation before it'll work here' or even better, 'we work to 'industry standard'? They are all the same thing when it boils down to it, a s...

ISO27001:2013 Annex A for Information Security Management Systems may seem like a bit of a long list of controls, there are 114 of them after all! However, it is fair to say that Annex A of the standard is quite possibly the most important section of the standard because it list's the controls that you need to consider and where appropriate have in...