Category Archives: Information Security

Information and data management through the use of formal Information Security Management Systems (ISMS), such as ISO/IEC 27001:2005 and informal management systems

Key ISMS Amendments


Users including certified organisations, certification bodies and their auditors & National Accreditation Bodies should be aware of amendments made by way of a corrigenda to ISO/IEC 27001:2013 and ISO/IEC 27002:2013. It is not often that ISO issue corrigenda (or amendments) … Continue reading

Posted in Auditing, Business Benefits, Certification, Information Security | Leave a comment

Final IAF Guidance on the transition to ISO/IEC 17021-1:2015


The International Accreditation Forum (IAF) have published their final Informative Document on Information on the Transition of Management System Accreditation to ISO/IEC 17021-1:2015 from ISO/IEC 17021:2011 (IAF ID 11:2015). The final publication follows a period of consultation and voting & … Continue reading

Posted in Accreditation, Auditing, Business Benefits, Certification, Environmental Management, Information Security, Quality Management | Leave a comment

Environmental Data-Sets available from the Environment Agency


The Environment Agency, as a Non-Departmental Public Body (NDPB), is required to respond to legitimate request for information under the Freedom of Information Act 2000 (2000 c. 36) & the Environmental Information Regulations 2004 (2004 No. 3391). However it is … Continue reading

Posted in Business Benefits, Environmental Management, Government, Information Security, Sustainability | Leave a comment

ISO Survey 2011: Available for free download


For the first time, the International Organization for Standardization (ISO) has issued its annual survey of ISO certifications with the opportunity to download the full dataset. Readers will recall an earlier article “Latest ISO Certification Survey 2010” published in January … Continue reading

Posted in Accreditation, Business Benefits, Compliance, Environmental Management, Information Security, Knowledge Transfer, Sustainability | Leave a comment

Use of Evernote in Auditing


In a slightly, different post than normal, I would like to highlight the software that I use for audit records and keeping ahead of the maze of documents that are necessary to access on a regular basis. The software is … Continue reading

Posted in Business Benefits, Environmental, Information Security, Knowledge Transfer, Sustainability | Leave a comment

Five Information Security Areas for SMEs & Charities


The Information Commissioner’s Office (ICO) has highlighted the top five areas for information security improvement for small and medium-sized organisations (SMEs)with staff training and communication with customers on their details are the most important areas. Its top five areas are as follows: Tell … Continue reading

Posted in Auditing, Business Benefits, Compliance, Government, Information Security, Knowledge Transfer | Leave a comment

PAS 99:2012 – Available for public consultation


This Publicly Available Specification (PAS) specifies common management system requirements and is intended to be used as a framework for implementing two or more management system standards/specifications in an integrated way. It draws together the common requirements in management system … Continue reading

Posted in Auditing, Business Benefits, Environmental, Environmental Management, Health & Safety, Information Security, Knowledge Transfer | 3 Comments