The next revision of ISO 9001 is expected in September 2026. While the final draft has not yet been formally published, industry discussions and committee commentary suggest two dominant themes: If accurate, this represents a structural shift rather than a cosmetic update. Organisations that treat this as a minor wording refresh will struggle. Those that

ISO 22301: Business Continuity in an Era of Global Chaos For many organisations, business continuity used to mean little more than data backups and a basic disaster recovery plan stored away for emergencies. That approach is no longer sufficient. As we move towards 2026, businesses are operating in a climate of persistent global disruption. Supply

If Your Certificate Has Expired A Practical Crisis Management Guide Data Privacy Day is a timely reminder that information security isn’t just about policies and certificates it’s about control confidence and continuity. For many organisations ISO 27001 or Cyber Essentials certification has lapsed unintentionally. This might be due to resource constraints internal change or simply

ISO 42001 Is the New “GDPR” for Tenders When GDPR came into force, it fundamentally changed how organisations approached data protection. Almost overnight, compliance shifted from a “nice to have” to a non-negotiable requirement for doing business, particularly in the public sector. We are now seeing the same pattern emerge with artificial intelligence. With the

ISO 45001 & ISO 45003 For years, psychological health and safety sat in the “wellbeing” bucket – important, admirable, but ultimately optional. That era is over. Today, organisations are being held legally accountable for how they manage psychosocial risks such as stress, burnout, bullying, harassment, and toxic workplace cultures. Regulators, courts, and employment tribunals are