Insights
What is changing in standards and regulation, and what to do about it, written by practitioners.
-
How long does ISO/IEC 42001 certification take?
A realistic timeline for ISO/IEC 42001 AI management system certification: the phases, what each involves, what speeds it up or slows it down, and how an existing ISO/IEC 27001 system helps.
-
NCA cybersecurity controls for the private sector: who is in scope and how to prepare
Saudi Arabia's NCA has issued cybersecurity controls for private sector entities outside critical national infrastructure. Who is in scope, what the controls cover, and a practical way to prepare.
-
Compliance awareness training: what auditors look for and how to deliver it
What ISO 27001, ISO 9001, ISO 37001, privacy laws and India's POSH Act expect from awareness training, what evidence auditors ask for, and how to choose between hosted e-learning and SCORM in your own LMS.
-
One control, many standards: running several ISO standards and laws as one system
How to run ISO 27001, ISO 9001, ISO 27701, SOC 2 and privacy laws such as DPDP and GDPR as one integrated management system, with one control set, one risk method and one audit programme.
-
Beyond ISO 9001 and 27001: the ISO 37000 governance and ISO 30400 HR series explained
What the ISO 37000 governance family (37000, 37001, 37002, 37008, 37301) and ISO 30400 HR family (30401, 30405, 30414, 30415, 30422) cover, and which are certifiable.
-
RBI, SEBI, IRDAI and CERT-In: a map of India’s financial-sector cyber rules
Which Indian cyber and IT rules apply to banks, NBFCs, payment companies, brokers and insurers: and how to meet them with one control framework.
-
DPDP Rules 2025: the compliance timeline every organisation serving India should know
The DPDP Rules were notified on 13 November 2025. Here is what applies when: November 2026 and May 2027, and how to prepare.
-
ISO 9001:2026 is published: what changed and how to transition
ISO 9001:2026 was published in September 2026. Here are the key changes: quality culture, risk, change management, knowledge and climate, and a practical transition plan.
-
ISO 27001 vs SOC 2: which do you need, and can you get both?
A plain-language comparison of ISO/IEC 27001 certification and SOC 2 attestation: scope, cost drivers, timelines, who asks for each, and how to reuse work across both.
-
ISO 14001:2026: what the new edition means for certified organisations
ISO 14001:2026 was published in April 2026. Learn what changed: environmental conditions, life cycle perspective, change management, and how to transition before 2029.
-
What is ISO/IEC 42001? A practical guide to AI management system certification
ISO/IEC 42001 explained: who needs it, what it requires, how it links to the EU AI Act, and the steps and timeline to certification.
-
ISO consultant or certification body? How to choose: and why you need to keep them separate
The difference between ISO consultants and accredited certification bodies such as BSI, DNV, TÜV, LRQA, Intertek and SGS, and how to choose each.
Find out where you stand in one call
Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.