If your organisation operates an ISO 9001 or ISO 45001 management system, this needs your attention. Under the Employment Rights Act 1996, changes introduced by the Employment Relations (Flexible Working) Act 2023 and subsequent updates mean that so-called “fire and rehire” tactics are now treated as automatically unfair dismissals in most circumstances. This is no
If you fabricate structural steel or aluminium for use in construction in Great Britain (England, Scotland and Wales), compliance with BS EN 1090-1 is not optional. It is a legal gateway to placing load-bearing structural components on the market. Failure to comply can result in enforcement action, project suspension, reputational damage, and financial penalties. This
BS EN 1090-1 for Structural Steel and Aluminium on the GB Market Read More »
The next revision of ISO 9001 is expected in September 2026. While the final draft has not yet been formally published, industry discussions and committee commentary suggest two dominant themes: If accurate, this represents a structural shift rather than a cosmetic update. Organisations that treat this as a minor wording refresh will struggle. Those that
Preparing for ISO 9001:2026 – The “September Shift” Read More »
The Rise of Fire Safety Enforcement in 2026 Fire safety enforcement across England is entering a more robust phase. Following reforms introduced under the Fire Safety Act 2021 and the Building Safety Act 2022, a further regulatory shift is now confirmed. The Fire Safety Residential Evacuation Plans Regulations 2025 come into force on 6 April
For software agencies and government IT contractors, service quality is no longer a differentiator — it is a baseline expectation. Whether delivering SaaS platforms, bespoke development, managed services, or long-term public sector frameworks, clients want demonstrable control, predictability, and continual improvement. ISO/IEC 20000-1 provides that structure — without imposing unnecessary bureaucracy or excessive documentation. This
With costs rising sharply in 2026, organisations are under pressure to do more with less. Yet many are still running separate ISO 9001, ISO 14001, and ISO 45001 systems and paying for them three times over. That approach is no longer just inefficient. It’s financially reckless. An Integrated Management System (IMS), supported by CandyBox, is
Integrated Management Systems: The 2-for-1 Efficiency Hack Read More »
ISO 22301: Business Continuity in an Era of Global Chaos For many organisations, business continuity used to mean little more than data backups and a basic disaster recovery plan stored away for emergencies. That approach is no longer sufficient. As we move towards 2026, businesses are operating in a climate of persistent global disruption. Supply
ISO 22301 Business Continuity in an Era of Global Chaos Read More »
EPS Certification, Scope 3, and the Reality of Government Carbon Reporting Environmental reporting is no longer a Tier 1 contractor problem. What started with central government frameworks is now cascading rapidly into smaller public sector contracts and many organisations are being caught unprepared. At the centre of this shift is PPN 06/21 and the government’s
ISO 27001 & Cyber Essentials Data Privacy Day is a timely reminder that information security isn’t just about policies and certificates it’s about control confidence and continuity. For many organisations ISO 27001 or Cyber Essentials certification has lapsed unintentionally. This might be due to resource constraints internal change or simply missing a surveillance or recertification
ISO 42001 Is the New “GDPR” for Tenders When GDPR came into force, it fundamentally changed how organisations approached data protection. Almost overnight, compliance shifted from a “nice to have” to a non-negotiable requirement for doing business, particularly in the public sector. We are now seeing the same pattern emerge with artificial intelligence. With the
