By All Standards

Send a text

Summary

In this conversation, Ian Shorten, an independent information security consultant, discusses the fundamentals of ISO 27001, a standard for managing information security. He explains its importance in today's interconnected world, the core concepts of the standard, and the journey organisations face during implementation. Ian emphasises the need for a culture of security awareness across all levels of an organisation and provides practical tips for successfully implementing ISO 27001.

Takeaways

ISO 27001 is a management system for information security.

It's not just for IT companies; all organisations need it.

Understanding information as an asset is crucial.

Confidentiality, integrity, and availability are key attributes of information security.

Creating a culture of security awareness is vital for all employees.

The implementation journey can take from three months to several years.

Risk management doesn't have to be overly complicated.

Regular maintenance of the ISMS is essential for effectiveness.

Most problems in security are caused by human error, not technology.

Get a grip on your information assets early in the process.

Chapters

00:00 Introduction to ISO 27001 and Information Security

02:55 Understanding Information Security Management Systems

05:35 The Importance of ISO 27001 in Today's World

08:09 Core Concepts of ISO 27001

10:39 Identifying and Managing Risks in Information Security

13:11 The Role of Controls in ISO 27001

15:51 Flexibility and Adaptability of ISO 27001

18:33 Implementation Journey for ISO 27001

21:49 Implementation Timeline for ISO 27001

23:24 Understanding Existing Controls and Technology

25:15 Common Pitfalls in Information Security Management

28:57 Scalability of ISO 27001 for Small Businesses

31:01 Creating a Culture of Security Awareness

33:45 Maintaining ISO 27001 Compliance

36:52 Top Tips for Starting ISO 27001 Journey

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Ian Shorten: https://www.linkedin.com/in/ian-shorten-8a100012/

Ian Shorten: [email protected] 

Send a text

Summary

This conversation delves into the requirements of ISO 45001, focusing on the importance of consultation and participation in health and safety management. Martin Graham explains the definitions of consultation and participation, the legal requirements surrounding them, and the significance of involving workers in decision-making processes. The discussion highlights the barriers to effective consultation, the role of leadership in fostering a safety culture, and practical tips for improving worker participation. Ultimately, the conversation emphasises the need for open communication and the importance of listening to workers' feedback to enhance safety practices within organisations.

Takeaways

ISO 45001 emphasises the need for consultation and participation.

Consultation involves seeking workers' views, while participation involves decision-making.

Involving workers can lead to better health and safety outcomes.

Legal requirements exist for worker participation in health and safety.

Barriers to effective consultation include fear of reprisals and lack of communication.

Leadership plays a crucial role in fostering a positive safety culture.

Simple mechanisms like suggestion boxes can improve participation.

Feedback from workers should be acknowledged and acted upon.

Consultation and participation are distinct but interconnected processes.

Creating an open environment encourages workers to voice their concerns.

Chapters

00:00 Understanding ISO 45001: Consultation and Participation

04:00 Legal Requirements and Cultural Impact

07:36 Engaging All Workers: Beyond Employees

10:23 Mechanisms for Effective Consultation

15:12 Common Pitfalls in Consultation Practices

16:54 Navigating Workplace Personalities

17:20 Overcoming Barriers to Safety Engagement

18:07 Creating a Culture of Open Communication

19:59 The Importance of Participation in Safety

22:01 Integrating Safety Standards Across the Organisation

23:37 Leadership's Role in Safety Culture

25:21 Building Trust Through Engagement

28:03 Defining Consultation vs. Participation

28:59 Simple Steps to Enhance Participation

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Martin Graham:  https://www.linkedin.com/in/martin-graham-657251173/

Send a text

Summary

In this conversation, Alex from JWA Management Consulting discusses the intricacies of ISO 14001 and environmental management systems. He explains the concepts of aspects and impacts, common pitfalls organisations face, and the importance of engaging employees in the process. The discussion also covers how to identify significant aspects, the role of legal compliance, and the importance of stakeholder engagement. Alex emphasises the need for continuous improvement and shares tools and resources that can aid organisations in their environmental management journey. The conversation concludes with success stories and contact information for further engagement.

Takeaways

Aspects are how an organisation interacts with the environment.

Impacts are the consequences of those interactions.

Many organisations treat environmental management as a tick-box exercise.

Engaging employees at all levels is crucial for effective environmental management.

Identifying aspects requires a thorough understanding of the organisation's operations.

Significant aspects are those that could have a major impact on the environment.

Legal compliance is a key component of environmental management.

Stakeholder engagement can drive improvements in environmental practices.

Continuous improvement is essential for effective environmental management.

Tools and resources are available to assist organisations in their environmental journey.

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

JWA Management Consultancy Website: https://www.jwallcock.co.uk/

JWA Management Consultancy LinkedIN: https://www.linkedin.com/company/jwa-management-consulting/posts/?feedView=all

Alex Holford LinkedIN: https://www.linkedin.com/in/alex-holford-pcqi-564414240/

Send a text

Summary

In this conversation, Robert Clements from Assent Risk Management discusses the evolution of ISO standards, the role of consultants, and common misconceptions about ISO certification. He emphasises the importance of documentation, communication, and leveraging ISO standards for business growth. The discussion also covers the challenges faced during audits, the differences in approach for startups versus established businesses, and strategies for promoting ISO certification post-achievement.

Takeaways

ISO consulting has evolved significantly over the years.

Documentation should be practical and not overly burdensome.

Clients often misunderstand the role of consultants in ISO certification.

ISO standards can help businesses grow and scale effectively.

Internal audits are crucial for identifying potential risks.

Startups can benefit greatly from implementing ISO standards early on.

Communication with consultants is key to successful ISO implementation.

Overcomplicating ISO processes can hinder effectiveness.

Promoting ISO certification can enhance business credibility.

The human aspect of consulting is vital for successful client relationships.

Chapters

00:00 Introduction to Assent Risk Management

00:49 The Evolution of ISO Standards

03:02 Rob's Journey into ISO Consulting

05:19 Understanding the Role of a Consultant

08:48 Common Misconceptions about ISO Standards

10:42 The Importance of Documentation

12:41 Effective Communication in ISO Implementation

14:36 Changing Perceptions of ISO Standards

16:39 Knowledge Transfer and Client Involvement

19:02 The Leadership Role in ISO Implementation

21:30 Navigating the Certification Process

24:27 Tailoring Approaches for Startups vs Established Businesses

26:58 The Value of Internal Audits

29:17 Maximising the Benefits of Certification

32:04 Learning from Audit Experiences

34:27 Engaging Effectively with Consultants

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Assent Risk Management Website: assentriskmanagement.co.uk & clemarkgroup.com

Rob Clements LinkedIN: https://www.linkedin.com/in/robert-clements-6a9a8b10/

Send a text

To learn more check out www.auva.com

Summary

In this conversation, Michael Venner and Ian Battersby delve into the intricacies of ISO systems, discussing the interconnectedness of standards, the impact of Annex SL, and the importance of context setting in management systems. They explore how risk assessments, operational controls, and management reviews play crucial roles in achieving intended outcomes. The discussion emphasises the need for clarity in documentation and the alignment of management systems with business strategies, ultimately advocating for a holistic approach to quality management.

Takeaways

• Implementing an ISO system requires a comprehensive understanding of interconnected clauses.
• The PDCA cycle is fundamental to effective management systems.
• Annex SL has significantly improved the integration of various management standards.
• Context setting is crucial for determining the scope and objectives of a management system.
• Risk assessments should be linked to context and opportunities for improvement.
• Measurement and monitoring are essential for evaluating the effectiveness of management systems.
• Auditing should be based on a risk assessment approach to ensure relevant areas are covered.
• Operational controls must align with compliance obligations and customer requirements.
• Management reviews are vital for assessing the adequacy of resources and achieving intended outcomes.
• Documentation should be structured to clearly reference and link different parts of the management system.

Chapters

00:00 Understanding Management System Standards

03:10 The Importance of Context in Standards

07:15 Interconnectedness of Clauses in Standards

11:22 Risk and Opportunity Assessment

16:11 Measuring Success in Management Systems

18:29 Connecting Shop Floor Control to Standards

20:08 Operational Control and Risk Management

21:50 The Importance of Auditing and Management Review

25:03 Assessing Resource Adequacy and Management Review

26:43 Interconnectedness in Operational Processes

28:00 Environmental Considerations in Operational Control

30:10 Aligning Risk Assessments Across Standards

31:31 Common Causes and Streamlined Auditing

33:16 Structuring Documentation for Clarity

35:08 Conclusion and Future Discussions

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Ian Battersby:  https://www.linkedin.com/in/ianthomasbattersby/

Blackmores UK:  https://blackmoresuk.com/

Blackmores Linkedin Page:  https://www.linkedin.com/company/blackmoresuk/posts/?feedView=all

Send a text

To learn more check out www.auva.com

Summary

In this conversation, Michael Venner and Martin Graham discuss the importance of effective management reviews, emphasising that they should be a continuous process rather than a one-off meeting. They explore the purpose of management reviews, the typical practices observed, and how organisations can better evidence their review processes. The discussion also highlights the role of technology in facilitating reviews and the need for organisations to engage employees in the review process. Ultimately, the conversation encourages businesses to challenge the status quo and think creatively about how they conduct management reviews to ensure they are genuinely beneficial.

Takeaways

• The secret to powerful reviews is to review your system continuously.
• Management reviews should not just be a meeting but an ongoing process.
• Outputs of management reviews are more important than just minutes.
• Engaging employees in the review process enhances effectiveness.
• Technology can aid in capturing and evidencing management reviews.
• Don't treat management reviews as a tick-box exercise for auditors.
• Use existing meetings to inform and enhance management reviews.
• Challenge the traditional approach to management reviews.
• The purpose of management reviews is to drive decisions and actions.
• Effective management reviews can significantly impact organisational performance.

Chapters

00:00 The Essence of Effective Management Reviews

02:33 Understanding the Purpose of Management Reviews

05:54 Typical Management Review Practices

10:43 Evidencing Management Reviews

15:39 Engaging Employees in the Review Process

20:31 Challenging the Status Quo in Management Reviews

25:58 The Role of Technology in Management Reviews

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Martin Graham:  https://www.linkedin.com/in/martin-graham-657251173/

Send a text

Summary

This conversation delves into the intricacies of certification processes, focusing on client transfers and the roles of certification bodies. Michael Venner and Martin Graham discuss how clients can seamlessly transfer their certifications without losing time, the importance of communication between certification bodies, and common misconceptions surrounding the transfer process. They emphasise the need for personal interaction and managing client expectations throughout the certification cycle.

Takeaways

• The certification process is crucial for maintaining industry standards.
• Clients do not lose time during the transfer of certifications.
• Communication between certification bodies and clients is essential.
• The transfer process is designed to be seamless and efficient.
• Understanding the risks involved in certification is important.
• Personal interaction enhances the certification experience.
• Clients should be aware of their rights to transfer certifications.
• Managing client expectations is key to a smooth process.
• Misconceptions about certification transfers can lead to unnecessary panic.
• The certification cycle remains consistent during transfers.

Chapters

00:00 Introduction to Certification Transfers

01:07 Reasons for Transferring Certification Bodies

05:37 The Transfer Process Explained

08:26 Understanding the Transfer Process

10:08 Navigating Certification Body Communication

12:24 Ensuring Compliance and Validity

14:45 Seamless Transition and Client Experience

17:33 Finalizing the Transfer and Client Notifications

21:37 Understanding the Aerospace Certification Process

23:52 The Importance of Risk Management in Audits

26:27 Navigating Non-Conformities and Findings

29:03 The Role of Independent Review in Certification

31:09 Simplifying the Transfer Process for Clients

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Martin Graham:  https://www.linkedin.com/in/martin-graham-657251173/

Send a text

Summary

In this conversation, Michael Venner and Beth Rhodes of Clear Quality discuss the significance of quality management and apprenticeship programs, particularly focusing on the Quality Practitioner program. They explore the structure, content, and benefits of the program, emphasising the importance of quality practitioners in driving business efficiency and continuous improvement. The discussion also covers the role of metrics, internal audits, and the impact of effective quality management on customer satisfaction. Additionally, they highlight the funding options available for apprenticeships and the transformative potential of these programs for both individuals and organisations.

Takeaways

• Quality management is essential for driving business efficiency.
• Quality practitioners play a crucial role in managing ISO standards.
• The Quality Practitioner program is a structured 14-month apprenticeship.
• Metrics and continuous improvement are key components of quality management.
• Internal audits should be seen as opportunities for growth, not just compliance checks.
• Apprenticeships are valuable for individuals at various career stages.
• Funding options for apprenticeships can significantly reduce costs for employers.
• Quality management is intrinsic to customer satisfaction and business success.
• The program encourages practical, project-based learning for real-world application.
• Investing in quality management training leads to long-term efficiency savings.

Chapters

00:00 Introduction to Quality Management and Apprenticeships

02:36 The Importance of Quality Practitioners

05:33 Structure and Content of the Quality Practitioner Program

08:11 The Role of Quality Managers in Business

10:54 Embedding Quality Management in Organizations

13:57 The Value of Metrics and Continuous Improvement

16:50 The Auditing Process and Its Importance

19:39 Diverse Applications of Quality Management

21:08 Mandatory MSA in Education

22:06 The Importance of Live Tutoring

23:16 Challenges in Supply Chain Management

25:04 The Cost of Cheap Suppliers

26:07 Lean Principles in Business

27:56 Transformative Power of Apprenticeships

29:29 Understanding Apprenticeship Funding

31:51 The Value of Quality Practitioner Training

34:40 How to Enroll in the Program

37:16 Real-World Impact of Quality Projects

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Clear Quality:  

Email:  [email protected]

Website:  https://www.clearquality.co.uk/training/apprenticeships

LinkedIN:  https://www.linked

Send a text

Summary

In this podcast episode, Michael Venner and Paula Brady discuss the importance of understanding and complying with legislation related to ISO standards, particularly ISO 14001 and ISO 45001. They explore the challenges businesses face in staying compliant with environmental and health and safety regulations, the significance of internal audits, and the need for effective risk management. Real-world examples illustrate the consequences of non-compliance, while practical advice is provided on identifying applicable legislation and managing compliance effectively.

Takeaways

• Legislation forms a huge part of managing ISO standards.
• Many companies are unaware of their environmental compliance obligations.
• Health and safety legislation is more well-known than environmental legislation.
• ISO 14001 is a key tool for demonstrating environmental commitment.
• Companies must be proactive in understanding applicable legislation.
• Documentation and evidence are crucial for compliance checks.
• Regular compliance evaluations can prevent legal issues.
• Internal audits help identify compliance gaps before enforcement actions occur.
• Businesses should streamline their processes for managing legislation.
• Awareness of legal responsibilities is essential for all organisations.

Chapters

00:00 Introduction to Legislation and Compliance

01:36 Understanding Health and Safety vs Environmental Legislation

05:05 The Growing Importance of Environmental Compliance

07:59 Real-World Implications of Non-Compliance

10:43 Identifying Applicable Legislation

16:19 Managing Compliance and Documentation

20:21 Waste Management Responsibilities and Liabilities

23:08 Council Waste Collection and Documentation Requirements

25:11 Evaluating Compliance and Risk Management

27:24 The Importance of Internal Audits

29:26 Understanding Compliance Checks and Legislation

31:11 The Risks of Non-Compliance

34:51 Health and Safety Executive Visits and Compliance

36:58 Benefits of Environmental Management Systems

38:51 Keeping Up with Legislation Changes

41:51 Mitigating Risks through Compliance Awareness

Send a text

Summary

In this podcast episode, Danny Lee shares his journey from a 15-year career in the Royal Air Force to becoming a consultant in the auditing sector. He discusses the transferable skills from the military to civilian auditing, the training he undertook, and his experiences with certification bodies. Danny reflects on the challenges and learning opportunities he encountered during his transition, emphasising the importance of preparation and adaptability in his new role. In this conversation, Danny Lee and Michael Venner discuss the intricacies of auditing, sharing insights from their experiences in the field. They explore the skills required for effective auditing, the importance of understanding management systems, and the challenges faced in design development. Danny reflects on how his military background informs his consulting approach, while also outlining his future aspirations in aerospace auditing. The discussion concludes with valuable advice for those considering a career in auditing or consulting, emphasising the need for the right personality traits and discipline.

Takeaways

• Danny transitioned from a military career to civilian auditing.
• He found auditing to be a structured and disciplined field.
• Danny enjoyed building management systems in the military.
• He realized he wanted to leave the military while still young.
• The military provided him with enhanced learning credits for training.
• Danny's military background helped him in understanding auditing standards.
• He observed different auditing styles during his training.
• The certification process requires thorough documentation of experience.
• Danny felt well-prepared for his first independent audit.
• He found the transition to civilian life both challenging and rewarding. Understanding processes quickly is crucial in auditing.
• Auditing requires a balance of open and closed questions.
• Creating a calm environment helps during audits.
• Learning from experiences is key to personal growth.
• Different companies have unique management systems.
• Customer feedback is vital for project management success.
• Design development can be complex and technical.
• Military experience can enhance consulting skills.
• Being a third-party auditor provides valuable insights.
• Approachability and discipline are essential traits for auditors.

Key Links

Auva Website: www.auva.com

Apple Podcast:  https://podcasts.apple.com/gb/podcast/by-all-standards/id1771677594

Spotify: https://open.spotify.com/show/79OUNj3vY9dmESR3okwHJa?si=871837f56dc149b6

Youtube: https://www.youtube.com/@auvacertification/podcasts

LinkedIN: https://www.linkedin.com/company/auva-certification-ltd 

Instagram: @auvacert

Michael Venner:  https://www.linkedin.com/in/michaelvenner-isocertificationexpert/ 

Danny Lee:  

Website: www.onesystemmgt.com

LinkedIN: www.linkedin.com/in/hiredannylee