Planning
Management system objectives for a very different year
Management system objectives for a very different year Management system objectives 2023 21 February 2023 – Setting ISO management system objectives for a very different year – taking a new perspective in 2023. ISO requirements for setting objectives At the simplest level, an objective is a statement of a desired outcome. Most of us respond…
Read MoreIs there a hole in your internal quality audit programme?
Is there a hole in your internal quality audit programme? Internal Audit Programme 8 February 2023 – This article discusses the hole in many Internal audit programmes, and how to fix it. The hole in many internal audit programmes Quality management systems need checks and maintenance to ensure that they are being effectively implemented to…
Read MoreISO 27001 Information Security – Clause 6.2 Objectives
ISO 27001 Information Security – Objectives and change management Clause 6.2 Objectives 9 June 2022 – ISO 27001 Information Security in plain English – Blog post #9. ISO 27001 – Clause 6.2 Objectives. Setting SMART Objectives to provide a focus to your management system, assigning, communicating, monitoring and measuring them. ISO 27001 Information Security…
Read MoreISO 27001 Information Security – Clause 6.1 Actions to address risks and opportunities
ISO 27001 Information Security – Clause 6.1 Actions to address risks and opportunities 1 June 2022 – ISO 27001 Information Security in plain English – Blog post #8. ISO 27001 – Clause 6.1 Actions to address risks and opportunities really follows on from where clauses 4. and 4.2 left off. Having understood the context of…
Read MoreISO 27001 Information Security – Clause 5.3 Organizational roles, responsibilities & authorities
ISO 27001 Information Security – Clause 5.3 Organizational roles, responsibilities and authorities 26 May 2022 – ISO 27001 Information Security in plain English – Blog post #7. ISO 27001 – Clause 5.3 requires that Information Security roles, responsibilities and authorities must be determined, assigned to people, and communicated to them. This article discusses how those…
Read MoreISO 27001 Information Security – Clause 5.2 Policy
ISO 27001 Information Security – Clause 5.2 Policy 17 May 2022 – ISO 27001 Information Security in plain English – Blog post #6. A key element in demonstrating top management’s leadership and commitment to Information Security is its Information Security Policy. This article discusses the requirements of Clause 5.2 Policy and how to address them.…
Read MoreISO 27001 Information Security – Clause 5.1 Leadership and commitment
ISO 27001 Information Security – Clause 5.1 Leadership and commitment 11 May 2022 – ISO 27001 Information Security in plain English – Blog post #5. With this article, we move into the standard’s clause 5 which includes a number of requirements for top management. It’s all part of ISO’s initiatives to involve senior management in…
Read MoreNew management systems implementation program
New management systems implementation program 25 August 2020 Authorised Qudos reseller ‘Auditor Training Online’ has announced MSIP – its new management systems implementation program. This exciting new program combines everything you need to build a management system for Quality, Environment and OH&S, or a combination of these standards. Notable amongst those inclusions is Qudos…
Read MoreBusiness continuity and ISO 22301
Business continuity and the ISO 22301 standard 19 May 2020 Business continuity management is dealing with the impact of disruptions in order to continue providing services or products. That is, at least to acceptable levels and time frames. A BCMS (or business continuity management system) will integrate arrangements for prevention and recovery to build…
Read MoreThinking about remote working?
Thinking about remote working? 16 March 2020 Many organisations are looking at remote working (or teleworking) for at least some of their workers during the Coronavirus or COVID-19 crisis. Remote working is not practical for everyone. However, it’s a potentially viable alternative for many to maintain at least some level of business continuity. It’s a…
Read More