Resources
Written by the people who conduct the audits. Clause explanations, transition guidance and the things we see going wrong most often.
FeaturedGuides
Why no accredited certification body can quote a fixed price without knowing you, what really sets audit duration under IAF MD 5, and how to compare quotations on a like-for-like basis.
All articles
19 articles shown
GuidesStage 1 decides whether you are ready for the certification audit proper. What the auditor reviews, how long it takes, what "areas of concern" mean, and how to arrive prepared.
GuidesHow certification auditors grade nonconformities, what each grade means for your certificate and timelines, and a method for root cause analysis and corrective action that is accepted first time.
GuidesWhy no accredited certification body can quote a fixed price without knowing you, what really sets audit duration under IAF MD 5, and how to compare quotations on a like-for-like basis.
GuidesHow to implement an ISO 45001 occupational health and safety management system — from scope and worker participation to hazard identification, the hierarchy of controls and readiness for certification.
GuidesWhat surveillance audits cover, why certificates get suspended between recertifications, and a practical checklist to work through in the weeks before your auditor arrives.
Standard UpdatesISO/IEC 42001:2023 is the first certifiable management system standard for artificial intelligence. What it requires, how it relates to ISO 27001, and which organisations should consider it now.
Industry InsightsWhat lead auditor training involves, how auditor certification schemes and certification bodies assess competence, and the realistic path from a course certificate to leading third-party audits.
GuidesThe information security risk assessment is the engine of ISO 27001. What clauses 6.1.2 and 6.1.3 require, how to choose a method, how risk treatment links to Annex A, and what goes into the Statement of Applicability.
GuidesA step-by-step method for checking any supplier’s ISO certificate: accreditation, the IAF MLA, NABCB, IAF CertSearch and certification body registers — plus the red flags that give fakes away.
Industry InsightsHow ISO 13485:2016 differs from ISO 9001, how it relates to the Medical Devices Rules, 2017 and CDSCO licensing, and the requirements that generate most audit findings.
GuidesA clause-by-clause ISO 9001 internal audit checklist with the questions and evidence to sample, plus how to plan the audit programme so internal audits find problems before your certification body does.
GuidesHACCP, ISO 22000 and FSSC 22000 build on each other rather than competing. Here is what each one covers, where FSSAI licensing fits, and how to choose based on who your customers are.
GuidesA practical walk through clauses 4 to 10 — what each one actually asks for, what auditors look for as evidence, and the misreadings that cause most nonconformities.
Industry InsightsWhat ISO 14001:2015 asks of a factory, how Indian environmental law feeds into compliance obligations, the nonconformities manufacturers most often receive, and what to expect at audit.
Standard UpdatesAnnex A went from 114 controls to 93, and eleven controls are genuinely new. Here is what changed structurally, what changed substantively, and how to rebuild your Statement of Applicability.
Industry InsightsMost IT companies pursue ISO 27001 to unblock a sales conversation. That is a good reason. Here are the four other returns that tend to surprise them.
GuidesWhat actually happens between deciding to certify and holding a certificate: every stage, who does what, how long each takes, and where the delays genuinely come from.
GuidesThey share a structure and a vocabulary, which makes the differences easy to underestimate. Here is what genuinely diverges, and why integrating them is usually the right call anyway.
GuidesCertification bodies are not interchangeable, and the differences do not appear in the quotation. What to verify before you sign, including things we would rather you did not ask us.
Beyond reading
Send it to us. If it is a good question we will answer it directly, and it will probably become the next article.
