General

ISO 27001 Clause 5.2 An Information Security Management System (ISMS) relies on a clear, well-communicated Information Security Policy to guide behaviour and decision-making. Clause 5.2 of ISO 27001:2022 focuses on establishing this policy and ensuring it supports the organisation’s information security objectives. To get customised support specific to your organisation, please get in touch with us. What […]

ISO 27001 Clause 5.1 Leadership is a cornerstone of an effective Information Security Management System (ISMS). Clause 5.1 of ISO 27001:2022 highlights the role of top management in actively supporting and driving information security initiatives. Without strong leadership, even the most well-designed ISMS can struggle to achieve its objectives. To get customised support specific to

ISO 27001 Clause 4.4 Clause 4.4 of ISO 27001:2022 marks a key milestone in building your Information Security Management System (ISMS). After defining the context, interested parties, and scope in Clauses 4.1–4.3, this clause focuses on establishing, implementing, maintaining, and continually improving the ISMS itself. To get customised support specific to your organisation, please get in

ISO 27001 Clause 4.3 An effective Information Security Management System (ISMS) begins with a clearly defined scope. Clause 4.3 of ISO 27001:2022 focuses on establishing the boundaries and applicability of your ISMS, a step that ensures your security controls are relevant, efficient, and aligned with your organisation’s objectives. To get customised support specific to your

ISO 27001 Clause 4.2 ISO 27001:2022 establishes a framework for managing information security through an Information Security Management System (ISMS). After understanding your organisation’s context under Clause 4.1, the next step, outlined in Clause 4.2, is to identify and understand the needs and expectations of interested parties. To get customised support specific to your organisation, please

ISO 27001 Clause 4.1 ISO 27001 is the international standard for information security management systems (ISMS). It helps organisations protect their information assets by implementing a structured approach to managing risks. One of the first steps in building an effective ISMS is understanding the organisation’s internal and external context, as outlined in Clause 4.1. To

What Is EN 1090? If your business manufactures or installs structural steel or aluminium components in the UK or EU, you’ve likely heard of EN 1090. But what exactly is it, why is it so important, and what does it mean for your business? In this post, we’ll break down what EN 1090 is, who

What Is the Difference Between a Hazard and a Risk? In workplace health and safety, the terms hazard and risk are often mentioned together — but they mean very different things. Understanding the distinction is essential for building a safe and compliant workplace. At Candy Management Consultants, we work with businesses across the UK to

How Much Does ISO 20000-1 Certification Cost? Reliable IT service management is vital to business success. Whether you deliver IT services to external clients or manage internal systems, customers expect consistency, reliability, and rapid response when things go wrong. That’s where ISO 20000-1, the international standard for IT service management systems (ITSMS), comes in. It

ISO 45001 is the internationally recognised standard for Occupational Health and Safety Management Systems (OHSMS). It provides organisations with a structured framework for identifying, managing, and reducing health and safety risks in the workplace. Achieving ISO 45001 certification not only demonstrates your commitment to employee wellbeing and legal compliance but also helps reduce incidents, improve