Author name: Candy Management Consultants

If your organisation holds ISO/IEC 27001 certification, or is currently working towards it, there is a strong chance that your Clause 4.1 – Understanding the Organisation and Its Context may need revisiting. Over the past year, there have been important developments affecting how organisations interpret this clause. Two areas in particular are becoming increasingly relevant […]

Achieving ISO certification is a major milestone for any organisation, but maintaining that certification requires ongoing surveillance audits. These audits are conducted by your certification body to ensure your management system continues to meet the requirements of the relevant standard and is being applied consistently across the business. While surveillance audits are typically shorter than

If your organisation operates an ISO 9001 or ISO 45001 management system, this needs your attention. Under the Employment Rights Act 1996, changes introduced by the Employment Relations (Flexible Working) Act 2023 and subsequent updates mean that so-called “fire and rehire” tactics are now treated as automatically unfair dismissals in most circumstances. This is no

If you fabricate structural steel or aluminium for use in construction in Great Britain (England, Scotland and Wales), compliance with BS EN 1090-1 is not optional. It is a legal gateway to placing load-bearing structural components on the market. Failure to comply can result in enforcement action, project suspension, reputational damage, and financial penalties. This

The Rise of Fire Safety Enforcement in 2026 Fire safety enforcement across England is entering a more robust phase. Following reforms introduced under the Fire Safety Act 2021 and the Building Safety Act 2022, a further regulatory shift is now confirmed. The Fire Safety Residential Evacuation Plans Regulations 2025 come into force on 6 April

With costs rising sharply in 2026, organisations are under pressure to do more with less. Yet many are still running separate ISO 9001, ISO 14001, and ISO 45001 systems and paying for them three times over. That approach is no longer just inefficient. It’s financially reckless. An Integrated Management System (IMS), supported by CandyBox, is