-
Continue reading →: Risk Assessments That Actually Work: A Practical Method for Busy Businesses
A practical five-step risk assessment method for busy SMEs: scope, real risks, simple scoring, current controls and actions that genuinely reduce risk.
-
Continue reading →: ISO 50001 in Plain English: Cut Energy Costs Without Guesswork
ISO 50001 explained in plain English: energy reviews, baselines and EnPIs, operational controls, and the data problems that fail energy audits.
-
Continue reading →: Management Review: The One Meeting That Stops Recurring Problems
A plain-English management review agenda for SMEs: the nine items to cover, the evidence to keep, and the mistakes auditors flag every time.
-
Continue reading →: ISO 18788 in Plain English: Security Operations Management That Clients Can Trust
ISO 18788 explained in plain English: operational control, supervision, incident management and the evidence security buyers expect to see.
-
Continue reading →: ISO 17021 in Plain English: Building Trust in Certification (Without Cutting Corners)
ISO 17021 explained in plain English: impartiality, competence, audit programme control and defensible certification decisions for certification bodies.
-
Continue reading →: ISO 22301 in Plain English: Business Continuity That Actually Works When Things Go Wrong
ISO 22301 explained in plain English: business impact analysis, continuity strategies, testing, and the mistakes that cause BCMS audits to fail.
-
Continue reading →: ISO 45003 in Plain English: Managing Stress, Wellbeing, and Mental Health at Work (Properly)
ISO 45003 explained in plain English: how to identify psychosocial hazards, put real controls in place, and evidence that you manage wellbeing risk.
-
Continue reading →: ISO 45001 in Plain English: Health & Safety Management Without the Panic
ISO 45001 explained in plain English: the seven gaps we see most in SMEs, what good looks like, and a practical seven-day starter plan.
-
Continue reading →: ISO 42001 in Plain English: AI Governance Without the Fluff
ISO 42001 explained in plain English: what the AI management system standard covers, who needs it, what evidence you need, and why audits fail.
-
Continue reading →: ISO 21001 in Plain English: A Management System for Better Education Outcomes
ISO 21001 explained in plain English: what an Education Organisation Management System covers, who needs it, and what makes audits fail.
Hello,
I’m Craig
Welcome to the ISO and Compliance Blog. I have spent over 20 years in compliance, specialising in accreditation and business growth. This blog is designed to help SMEs on their journey to top-notch compliance. Any questions, feel free to drop me an email at Craig@CAWConsultancy.co.uk.
My companies
- CAW Consultancy: ISO and accreditation consultancy
- CAW Digital: paperless systems, apps and dashboards
- Screen My Staff: BS 7858 screening and workplace wellbeing
- ISO Training Institute: online ISO and compliance courses
Let’s connect
Stay ahead of your next audit
Plain-English ISO and compliance guidance, straight to your inbox. No jargon, no sales pitch.
