As a parent I find myself saying things to my 11 year old daughter that I certainly heard my parents say to me, things that made my eyes roll and managed to draw deep huffing breaths from me as these were stated for the umpteenth time, and I'm certain I'm not alone with this. Things like, tidy up your room, where is your other shoe (there is always...

It's easy to think that when something is called Information Security that it only relates to the 'Information Technology' Department of your organisation, it's a common mistake that many people make. They believe, wrongly, that the IT geeks will have this all taken care of and it's not something for their department or their people to worry about,...

We work with a lot of organisations helping with their ISO9001, 14001, 27001 or 45001 implementation and ongoing management of their new systems. We like to use Mango for this as it's a fantastic fully integrated platform to manage all the requirements of these standards. Over the last few years, we have noticed an ongoing trend within these implem...

When I talk to organisations about how to improve things something they all jump on is their quality, we must improve our quality. Great I'd say, so tell me what you mean by that, they would then typically run off a list of things that are found to be wrong with their products or service that either get to the customer or cause things to pile up at...

 A short while ago I got the chance to catch up with Craig Thornton from Mango QHSE, of course both being lock-down along with the rest of New Zealand and most of the world it was via a web call.  The subject was one close to my heart, improvements. Specifically how do you uncover that are already hiding within your QHSE system, that are ...

You may have noticed that we used the word Active twice in the title of this principle, that was deliberate. When it comes to your Information Security Management System relaying on passive, reactive security steps is going to be pretty disastrous for your organisation, waiting for something to happen ( or worse still if something happens and you d...

With everything that is going on in the world at the moment with the Covid-19 pandemic the move to working remotely has exploded. People have, to be fair, worked remotely for a long time and been successful with it, but it's not normally been the whole team, it's normally been a few people and even then they would pop in for face to face meetings o...

When you think about your information systems, repositories and sources of information within your organisation have you built security into them or is it a bolt on after the fact? Is it there at all? Keeping in mind that Information Security is about more than just your IT systems and what's stored there but about all information have you built in...

Understanding the risks in your organisation is a key part of being able to effectively manage it and its part of the reason that the ISO management systems now take a risk-based approach to things. ISO27001:2015 is no different to the other standards in that respect, if you want to have an effective Information Security Management System (ISMS) th...

Imagine you are in the Scottish Highlands in the late 1500's between you and your extended family or Clan as we call them, you have a bit of land and around 600 cattle and sheep. Now imagine that another clan have decided that for what ever reason to have a bit of a battle. Typically, these battles were comprised of hundreds of people all on foot w...