Welcome to By All Standards, the podcast where ISO and AS Standards get a little more fun and a lot more insightful!
Join us in each episode as we dive into the world of ISO and AS Certifications, sharing tips, tricks, and stories that will help you navigate the certification landscape like a pro.
Our team of expert Auditors and Accreditation specialists, along with some fantastic guests, are here to sprinkle a little wisdom and plenty of anecdotes to make your certification journey smoother and more successful. Let's make standards a little less standard!
In this conversation, Ian Shorten, an independent information security consultant, discusses the fundamentals of ISO 27001, a standard for managing information security. He explains its importance in today's interconnected world, the core concepts of the standard, and the journey organisations face during implementation. Ian emphasises the need for a culture of security awareness across all levels of an organisation and provides practical tips for successfully implementing ISO 27001.
Takeaways
ISO 27001 is a management system for information security.
It's not just for IT companies; all organisations need it.
Understanding information as an asset is crucial.
Confidentiality, integrity, and availability are key attributes of information security.
Creating a culture of security awareness is vital for all employees.
The implementation journey can take from three months to several years.
Risk management doesn't have to be overly complicated.
Regular maintenance of the ISMS is essential for effectiveness.
Most problems in security are caused by human error, not technology.
Get a grip on your information assets early in the process.
Chapters
00:00 Introduction to ISO 27001 and Information Security
02:55 Understanding Information Security Management Systems
05:35 The Importance of ISO 27001 in Today's World
08:09 Core Concepts of ISO 27001
10:39 Identifying and Managing Risks in Information Security
13:11 The Role of Controls in ISO 27001
15:51 Flexibility and Adaptability of ISO 27001
18:33 Implementation Journey for ISO 27001
21:49 Implementation Timeline for ISO 27001
23:24 Understanding Existing Controls and Technology
25:15 Common Pitfalls in Information Security Management
28:57 Scalability of ISO 27001 for Small Businesses
This conversation delves into the requirements of ISO 45001, focusing on the importance of consultation and participation in health and safety management. Martin Graham explains the definitions of consultation and participation, the legal requirements surrounding them, and the significance of involving workers in decision-making processes. The discussion highlights the barriers to effective consultation, the role of leadership in fostering a safety culture, and practical tips for improving worker participation. Ultimately, the conversation emphasises the need for open communication and the importance of listening to workers' feedback to enhance safety practices within organisations.
Takeaways
ISO 45001 emphasises the need for consultation and participation.
Consultation involves seeking workers' views, while participation involves decision-making.
Involving workers can lead to better health and safety outcomes.
Legal requirements exist for worker participation in health and safety.
Barriers to effective consultation include fear of reprisals and lack of communication.
Leadership plays a crucial role in fostering a positive safety culture.
Simple mechanisms like suggestion boxes can improve participation.
Feedback from workers should be acknowledged and acted upon.
Consultation and participation are distinct but interconnected processes.
Creating an open environment encourages workers to voice their concerns.
Chapters
00:00 Understanding ISO 45001: Consultation and Participation
In this conversation, Alex from JWA Management Consulting discusses the intricacies of ISO 14001 and environmental management systems. He explains the concepts of aspects and impacts, common pitfalls organisations face, and the importance of engaging employees in the process. The discussion also covers how to identify significant aspects, the role of legal compliance, and the importance of stakeholder engagement. Alex emphasises the need for continuous improvement and shares tools and resources that can aid organisations in their environmental management journey. The conversation concludes with success stories and contact information for further engagement.
Takeaways
Aspects are how an organisation interacts with the environment.
Impacts are the consequences of those interactions.
Many organisations treat environmental management as a tick-box exercise.
Engaging employees at all levels is crucial for effective environmental management.
Identifying aspects requires a thorough understanding of the organisation's operations.
Significant aspects are those that could have a major impact on the environment.
Legal compliance is a key component of environmental management.
Stakeholder engagement can drive improvements in environmental practices.
Continuous improvement is essential for effective environmental management.
Tools and resources are available to assist organisations in their environmental journey.
In this conversation, Robert Clements from Assent Risk Management discusses the evolution of ISO standards, the role of consultants, and common misconceptions about ISO certification. He emphasises the importance of documentation, communication, and leveraging ISO standards for business growth. The discussion also covers the challenges faced during audits, the differences in approach for startups versus established businesses, and strategies for promoting ISO certification post-achievement.
Takeaways
ISO consulting has evolved significantly over the years.
Documentation should be practical and not overly burdensome.
Clients often misunderstand the role of consultants in ISO certification.
ISO standards can help businesses grow and scale effectively.
Internal audits are crucial for identifying potential risks.
Startups can benefit greatly from implementing ISO standards early on.
Communication with consultants is key to successful ISO implementation.
Overcomplicating ISO processes can hinder effectiveness.
Promoting ISO certification can enhance business credibility.
The human aspect of consulting is vital for successful client relationships.
In this conversation, Michael Venner and Ian Battersby delve into the intricacies of ISO systems, discussing the interconnectedness of standards, the impact of Annex SL, and the importance of context setting in management systems. They explore how risk assessments, operational controls, and management reviews play crucial roles in achieving intended outcomes. The discussion emphasises the need for clarity in documentation and the alignment of management systems with business strategies, ultimately advocating for a holistic approach to quality management.
Takeaways
Implementing an ISO system requires a comprehensive understanding of interconnected clauses.
The PDCA cycle is fundamental to effective management systems.
Annex SL has significantly improved the integration of various management standards.
Context setting is crucial for determining the scope and objectives of a management system.
Risk assessments should be linked to context and opportunities for improvement.
Measurement and monitoring are essential for evaluating the effectiveness of management systems.
Auditing should be based on a risk assessment approach to ensure relevant areas are covered.
Operational controls must align with compliance obligations and customer requirements.
Management reviews are vital for assessing the adequacy of resources and achieving intended outcomes.
Documentation should be structured to clearly reference and link different parts of the management system.
In this conversation, Michael Venner and Martin Graham discuss the importance of effective management reviews, emphasising that they should be a continuous process rather than a one-off meeting. They explore the purpose of management reviews, the typical practices observed, and how organisations can better evidence their review processes. The discussion also highlights the role of technology in facilitating reviews and the need for organisations to engage employees in the review process. Ultimately, the conversation encourages businesses to challenge the status quo and think creatively about how they conduct management reviews to ensure they are genuinely beneficial.
Takeaways
The secret to powerful reviews is to review your system continuously.
Management reviews should not just be a meeting but an ongoing process.
Outputs of management reviews are more important than just minutes.
Engaging employees in the review process enhances effectiveness.
Technology can aid in capturing and evidencing management reviews.
Don't treat management reviews as a tick-box exercise for auditors.
Use existing meetings to inform and enhance management reviews.
Challenge the traditional approach to management reviews.
The purpose of management reviews is to drive decisions and actions.
Effective management reviews can significantly impact organisational performance.
Chapters
00:00 The Essence of Effective Management Reviews
02:33 Understanding the Purpose of Management Reviews
05:54 Typical Management Review Practices
10:43 Evidencing Management Reviews
15:39 Engaging Employees in the Review Process
Changing Certification Bodies Without the Chaos – A Step-by-Step Guide
This conversation delves into the intricacies of certification processes, focusing on client transfers and the roles of certification bodies. Michael Venner and Martin Graham discuss how clients can seamlessly transfer their certifications without losing time, the importance of communication between certification bodies, and common misconceptions surrounding the transfer process. They emphasise the need for personal interaction and managing client expectations throughout the certification cycle.
Takeaways
The certification process is crucial for maintaining industry standards.
Clients do not lose time during the transfer of certifications.
Communication between certification bodies and clients is essential.
The transfer process is designed to be seamless and efficient.
Understanding the risks involved in certification is important.
Personal interaction enhances the certification experience.
Clients should be aware of their rights to transfer certifications.
Managing client expectations is key to a smooth process.
Misconceptions about certification transfers can lead to unnecessary panic.
The certification cycle remains consistent during transfers.
Chapters
00:00 Introduction to Certification Transfers
01:07 Reasons for Transferring Certification Bodies
05:37 The Transfer Process Explained
08:26 Understanding the Transfer Process
10:08 Navigating Certification Body Communication
12:24 Ensuring Compliance and Validity
14:45 Seamless Transition and Client Experience
Investing in People: Why Apprenticeships are a Win-Win for Business
In this conversation, Michael Venner and Beth Rhodes of Clear Quality discuss the significance of quality management and apprenticeship programs, particularly focusing on the Quality Practitioner program. They explore the structure, content, and benefits of the program, emphasising the importance of quality practitioners in driving business efficiency and continuous improvement. The discussion also covers the role of metrics, internal audits, and the impact of effective quality management on customer satisfaction. Additionally, they highlight the funding options available for apprenticeships and the transformative potential of these programs for both individuals and organisations.
Takeaways
Quality management is essential for driving business efficiency.
Quality practitioners play a crucial role in managing ISO standards.
The Quality Practitioner program is a structured 14-month apprenticeship.
Metrics and continuous improvement are key components of quality management.
Internal audits should be seen as opportunities for growth, not just compliance checks.
Apprenticeships are valuable for individuals at various career stages.
Funding options for apprenticeships can significantly reduce costs for employers.
Quality management is intrinsic to customer satisfaction and business success.
The program encourages practical, project-based learning for real-world application.
Investing in quality management training leads to long-term efficiency savings.
Chapters
00:00 Introduction to Quality Management and Apprenticeships
02:36 The Importance of Quality Practitioners
05:33 Structure and Content of the Quality Practitioner Program
ISO 14001 & 45001: Navigating Compliance Like a Pro
In this podcast episode, Michael Venner and Paula Brady discuss the importance of understanding and complying with legislation related to ISO standards, particularly ISO 14001 and ISO 45001. They explore the challenges businesses face in staying compliant with environmental and health and safety regulations, the significance of internal audits, and the need for effective risk management. Real-world examples illustrate the consequences of non-compliance, while practical advice is provided on identifying applicable legislation and managing compliance effectively.
Takeaways
Legislation forms a huge part of managing ISO standards.
Many companies are unaware of their environmental compliance obligations.
Health and safety legislation is more well-known than environmental legislation.
ISO 14001 is a key tool for demonstrating environmental commitment.
Companies must be proactive in understanding applicable legislation.
Documentation and evidence are crucial for compliance checks.
Regular compliance evaluations can prevent legal issues.
Internal audits help identify compliance gaps before enforcement actions occur.
Businesses should streamline their processes for managing legislation.
Awareness of legal responsibilities is essential for all organisations.
Chapters
00:00 Introduction to Legislation and Compliance
01:36 Understanding Health and Safety vs Environmental Legislation
05:05 The Growing Importance of Environmental Compliance
From Military to Management: Danny Lee’s Journey into Auditing & Consulting
In this podcast episode, Danny Lee shares his journey from a 15-year career in the Royal Air Force to becoming a consultant in the auditing sector. He discusses the transferable skills from the military to civilian auditing, the training he undertook, and his experiences with certification bodies. Danny reflects on the challenges and learning opportunities he encountered during his transition, emphasising the importance of preparation and adaptability in his new role. In this conversation, Danny Lee and Michael Venner discuss the intricacies of auditing, sharing insights from their experiences in the field. They explore the skills required for effective auditing, the importance of understanding management systems, and the challenges faced in design development. Danny reflects on how his military background informs his consulting approach, while also outlining his future aspirations in aerospace auditing. The discussion concludes with valuable advice for those considering a career in auditing or consulting, emphasising the need for the right personality traits and discipline.
Takeaways
Danny transitioned from a military career to civilian auditing.
He found auditing to be a structured and disciplined field.
Danny enjoyed building management systems in the military.
He realized he wanted to leave the military while still young.
The military provided him with enhanced learning credits for training.
Danny's military background helped him in understanding auditing standards.
He observed different auditing styles during his training.
The certification process requires thorough documentation of experience.
Danny felt well-prepared for his first independent audit.
He found the transition to civilian life both challenging and rewarding. Understanding processes quickly is crucial in auditing.
Auditing requires a balance of open and closed questions.
Creating a calm environment helps during audits.
Podcasts Similaires Basées sur le Contenu
Découvrez des podcasts liées à By All Standards. Explorez des podcasts avec des thèmes, sujets, et formats similaires. Ces similarités sont calculées grâce à des données tangibles, pas d'extrapolations !
