Author name: Candy Management Consultants

ISO 22301: Business Continuity in an Era of Global Chaos For many organisations, business continuity used to mean little more than data backups and a basic disaster recovery plan stored away for emergencies. That approach is no longer sufficient. As we move towards 2026, businesses are operating in a climate of persistent global disruption. Supply

If Your Certificate Has Expired A Practical Crisis Management Guide Data Privacy Day is a timely reminder that information security isn’t just about policies and certificates it’s about control confidence and continuity. For many organisations ISO 27001 or Cyber Essentials certification has lapsed unintentionally. This might be due to resource constraints internal change or simply

ISO 42001 Is the New “GDPR” for Tenders When GDPR came into force, it fundamentally changed how organisations approached data protection. Almost overnight, compliance shifted from a “nice to have” to a non-negotiable requirement for doing business, particularly in the public sector. We are now seeing the same pattern emerge with artificial intelligence. With the

ISO 45001 & ISO 45003 For years, psychological health and safety sat in the “wellbeing” bucket – important, admirable, but ultimately optional. That era is over. Today, organisations are being held legally accountable for how they manage psychosocial risks such as stress, burnout, bullying, harassment, and toxic workplace cultures. Regulators, courts, and employment tribunals are

Energy Savers Week 2026 Energy Savers Week 2026 begins on Monday 19 January and provides an important opportunity for organisations to reflect on how energy is used, managed and controlled across their operations. The campaign is led by the Energy Saving Trust and focuses on raising awareness of practical actions that reduce energy use, lower

Maintaining ISO/IEC 27001 Certification Achieving ISO/IEC 27001 certification is a significant milestone for any organisation. It demonstrates a formal commitment to information security, risk management, and regulatory compliance. However, one of the most common misconceptions about ISO 27001 is that certification is a one-time exercise. In reality, certification is only the beginning. Maintaining ISO 27001

Preparing for the 2026 ISO Updates As we move into 2026, the landscape of international standards is undergoing its most significant shift in a decade. If you are currently certified to ISO 9001 or ISO 14001, you likely noticed your recent audits felt different, more focused on context, resilience, and risk. This is not a