-
Continue reading →: How to Tell If Your Team Is Using AI (And Why That’s Not the Real Problem)
The tells that text was AI-generated, the quirks of each major model, and why shadow AI and governance matter far more than catching a stray em dash.
-
Continue reading →: ISO 27701: Privacy Information Management That Goes Beyond GDPR Paperwork
ISO 27701 explained: the PIMS extension to ISO 27001, how it evidences GDPR obligations, the controls it adds, and how to prepare for certification.
-
Continue reading →: ISO 22000: Food Safety Management That Protects Your Brand as Much as Your Customers
ISO 22000 explained: how it wraps a management system around HACCP, what the standard requires, who needs it, and how to prepare for certification.
-
Continue reading →: ISO 37301: Compliance Management Beyond Ticking Legal Boxes | CAW Consultancy
ISO 37301 explained: what a real compliance management system requires, why following the law is not a system, and who should prioritise certifying.
-
Continue reading →: ISO 27701: Extending Your ISMS to Cover Data Privacy | CAW Consultancy
How ISO 27701 extends an existing ISO 27001 ISMS to cover personal data, how it relates to UK GDPR, who needs it, and what implementation involves.
-
Continue reading →: ISO 20000 Tips: IT Service Management Made Simple | CAW Consultancy
What ISO 20000 requires, who actually needs it, how it differs from ITIL, and practical tips for getting your IT service management certified.
-
Continue reading →: Modern Slavery Act Compliance for Supply Chains: A 2026 Guide | CAW Consultancy
Modern Slavery Act reporting is gaining financial penalties. What section 54 requires now, what the 2026 Bill changes, and what suppliers should do.
-
Continue reading →: Sustainability Reporting Rules Every UK Business Should Know | CAW Consultancy
What UK sustainability reporting actually requires in 2026: SECR, ESOS, TCFD and the new UK SRS: who is in scope, and why SMEs still get asked.
-
Continue reading →: Data Breach Response: Your First 72 Hours Under GDPR | CAW Consultancy
What to do in the first 72 hours after a personal data breach: containment, assessment, the ICO notification decision, and telling the people affected.
-
Continue reading →: Right to Work Checks: A Step-by-Step Compliance Guide | CAW Consultancy
How to run a compliant right to work check, the three check types, the evidence you must keep, and what changes for UK employers on 1 October 2026.
Hello,
I’m Craig
Welcome to the ISO and Compliance Blog. I have spent over 20 years in compliance, specialising in accreditation and business growth. This blog is designed to help SMEs on their journey to top-notch compliance. Any questions, feel free to drop me an email at Craig@CAWConsultancy.co.uk.
My companies
- CAW Consultancy: ISO and accreditation consultancy
- CAW Digital: paperless systems, apps and dashboards
- Screen My Staff: BS 7858 screening and workplace wellbeing
- ISO Training Institute: online ISO and compliance courses
Let’s connect
Stay ahead of your next audit
Plain-English ISO and compliance guidance, straight to your inbox. No jargon, no sales pitch.
