The ISO Show

As many of you are aware, an updated version of ISO 27001 was published in October 2022. While there is a 2-year grace period for transition, we would urge everyone to make a start on implementing the changes to ensure you are compliant with latest best practice standards. But where do you start? In the last episode, Mel and Steve gave an overview of the updated ISO 27001:2022, including a high-le...

The long-awaited update of ISO 27001 arrived in October 2022, having gone 9 years since its previous 2013 iteration. Needless to say, it was much overdue. The new 2022 version of the Standard includes 11 new controls and sees around 56 other controls combined into 24 newly titled controls. In order to cover every aspect of the new Standard, we'll be running a mini-series through January and Februa...

Happy New Year! We at Blackmores hope you all managed to have a break over the holiday season and are gearing up for many challenges and successes in 2023. As a reminder, we signed off last year by highlighting the top 5 podcasts as dictated by you, the listeners. Before we dive into a brand-new year full of top tips, expert advice with industry leaders and client interviews, we'd like to take a s...

It's been a busy year here at Blackmores! Somehow, we managed to fit in the time to publish 37 new ISO Show episodes. It's been a mix of knowledge sharing, top tips, advise and stories from our very own consultants and clients – and we're looking forward to sharing even more with you next year! We thought it'd be good to end this year on a look back at 2022 and highlight 5 of the most listened to...

Currently, there are around 1,077,884 valid ISO 9001 certificates globally – which beats the second runner ISO 14001 by over 600,000! There is no doubt that the Quality Management Standard, ISO 9001, is still the most widely adopted ISO Standard – and for good reason! ISO 9001 is basically a model for running a successful and profitable business. It provides a common framework for things that all...

Data breaches have risen by 70% globally in Q3 of 2022 , reenforcing the requirement for many to seek out Information Security solutions, especially those within the tech space. Today we speak to Triaster, who have been in operation since 1994, providing businesses with process mapping and execution software to help drive business improvement. Triaster's Business Operations Manager, Jane Duncan, e...

All companies have a legal obligation to comply with existing legislation – it's the law! Failure to comply to legal requirements can be costly in terms of fines and reputational damage if an incident occurs. So, it's in your best interest to ensure you can identify all applicable compliance requirements.   Most ISO's specify a requirement to identify legal compliance requirements, and in our expe...

We have over 17 years experience of implementing various ISO's – and we'd like to share some insight into our proven methodology.   Our regular listeners may be familiar with the term 'isology' from previous episodes where we've highlighted our online platform – the isologyhub. But what is isology exactly? Put simply, isology is our 7-step method for implementing any ISO Standard. Join Mel this we...

ISO 22716 sets out the framework for a quality management system for anyone involved in the manufacture of cosmetics and other healthcare related products. While this Standard's focus is on the manufacture of cosmetics specifically, many of the requirements can apply to any manufacturing process, especially those that involve a risk of contamination. This Standard sets out clear guidance to help y...

ISO 22716 sets out the framework for a quality management system for anyone involved in the manufacture of cosmetics and other healthcare related products. While this Standard's focus is on the manufacture of cosmetics specifically, many of the requirements can apply to any manufacturing process, especially those that involve a risk of contamination. As discussed in last weeks' episode, having ISO...

ISO 22716 sets out the framework for a quality management system for anyone involved in the manufacture of cosmetics and other healthcare related products. While this Standard's focus is on the manufacture of cosmetics specifically, many of the requirements can apply to any manufacturing process, especially those that involve a risk of contamination. On the surface, ISO 22716 may be considered a n...

ISO 22716 sets out the framework for a quality management system for anyone involved in the manufacture of cosmetics and other healthcare related products. This is not only limited to production but also the control, storage, and transportation of products, including the purchase of raw materials, components and packaging material. While this Standard's focus is on the manufacture of cosmetics, ma...

Today we're joined by Phil Bailey, Managed Services Director at PMC Retail, to talk about PMC's experience with ISO 27001, from implementation to on-going maintenance. PMC is a leading retail IT services and solutions provider, who recognised the growing need for formal Information Security certification. They succeeded in achieving certification to ISO 27001 in 2021, now over a year down the line...

The work doesn't stop once you get ISO certified, there is a requirement to complete an annual surveillance audit to ensure your Management System continues to meet the requirements of the standard(s). Last week Mel covered some basic preparation you can do ahead of a Surveillance Audit, but what should you expect on the actual audit day? Today, Mel shares 10 top tips to help you prepare and ensur...

The work doesn't stop once you get ISO certified, there is a requirement to complete an annual surveillance audit to ensure your Management System continues to meet the requirements of the standard(s). Surveillance audits must be carried out by a Certification Body, during which they will typically look at your Management Review, your preventative and corrective actions process, Internal auditing...

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology. One of the new controls added under the Physical category, is something called physical security monitoring. But what does this mean exactly? Steve Mason joins us again today to delve deeper into physical security monitoring to expla...

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology. One of the new controls added under the technological category, is something called web filtering. But what does this mean exactly? Steve Mason joins us again today to delve deeper into web filtering to explain what it is, breaks dow...

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology. One of the new controls added under the organisational category, is something called threat intelligence. But what does this mean exactly? Steve Mason joins us again today to delve deeper into threat intelligence to explain what it i...

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology. One of the new controls added under the technological category, is something called Data Masking. But what does this mean exactly? Steve Mason joins us again today to delve deeper into data masking to explain what it is, why it's so...

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology. As a reminder, ISO 27002 (Information security, cybersecurity and privacy protection — Information security controls) is a guidance document which provides further best practice advice to strengthen your IT Security. Today, Steve Mas...

Did you know there were 80 identified security incidents, resulting in 34,908,053 compromised records in June 2022 alone! Standards such as ISO 27001 can help you put measures in place to reduce risk and help set up procedures for data recovery. However, not as many adopt the guidance document ISO 27002 which provides further best practice advice to strengthen your IT Security. ISO 27002 has recen...

The Sustainable Development Goals have been established by world leaders with the hope that we can work together towards a better world by 2030. The last two episodes provide an overview of all 17 Goals and related ISO Standards that you could align with to meet these goals. But how do you put this into practice? How do you go about aligning your Management System to the SDG's? Today, Mel explains...

In 2015, world leaders came together to create 17 Sustainable Development Goals (SDG's) which aim to tackle various social, economic and environmental issues, to build a better world by 2030. What you may not be aware of is the fact that ISO Standards play a big part in the journey towards a better future. Many commonly used ISO Standards already meet certain goals, with more in development. This...

The world is facing a crisis: poverty, hunger, inequality and climate change are just some of the issues we need to address. In 2015, world leaders came together to create 17 Sustainable Development Goals (SDG's) which aim to tackle these issues, to build a better world by 2030. What you may not be aware of is the fact that ISO Standards play a big part in the journey towards a better future. Many...

Do you find keeping up with regular annual ISO tasks a struggle? It's easy to let ISO maintenance slip through the cracks, especially if it's in addition to your primary job role. If this sounds familiar, then you should consider outsourcing certain areas of your ISO management system to be managed by ISO experts. Today, Mel explains the areas that should be managed in-house, the areas that can be...