The ISO Show

ISO 27002 was recently updated this year – along with a reduction of overall controls, 11 completely news ones were added to keep up with new and emerging technology.

As a reminder, ISO 27002 (Information security, cybersecurity and privacy protection — Information security controls) is a guidance document which provides further best practice advice to strengthen your IT Security.

Today, Steve Mason explains the changes made to the 2022 version of ISO 27002, gives a summary of the 11 new controls and gives some examples of some key considerations and actions you can take to implement them.

You'll learn

• What changes have been made to ISO 27002:2022
• Why ISO 27002 has been updated in 2022
• An overview of the 11 new controls added to ISO 27002
• Examples of actions you can take to implement the new controls

Resources

• ISOlogy Hub
• Blackmores

In this episode, we talk about:

[01:28] A brief summary of the changes to ISO 27002:2022, including new controls, new structure and attribute types

[05:30] Controls in ISO 27002 now have a defined purpose to avoid misinterpretation

[06:29] A summary of the 11 new controls by name and category

[08:10] Threat intelligence – What tools do you have in place to identify threats? How do you monitor your threat intelligence effectiveness?

[11:20] Information Security use of Cloud Services – A reminder that ISO 27017 covers this in more detail! Do you have a cloud policy in place? Does it align with your clients security requirements?

[13:10] ICT readiness for Business Continuity – Focus on recovery of IT services following a disaster. Do you have Business Impact Assessments in place? If you're certified to ISO 22301 – this area is most likely covered

[14:36] Physical Security monitoring – Are you monitoring physical security? i.e. keycard access, CCTV ect

[16:23] Configuration Management – Are you IT systems working well together? Do you have an established configuration for passwords? (i.e. how many characters, alpha numerical, symbols ect)

[18:13] Information Deletion – If data needs to be deleted, that it's deleted in a secure manor and can't be recovered.

[21:48] Data Masking – Make sure that any data that shouldn't be shared is masked in some way i.e. obfuscated or anonymized.

[23:31] Data Leakage – Put measures in place to stop data being leaked through i.e. USB's, people sending business information to personal email addresses ect

[26:55] Monitoring Activities – You could monitor network traffic, software access ect. Be selective in your monitoring, only do so if it will be of benefit to the business.

[28:04] Web Filtering – Ensure that employees can't access any nefarious / high risk websites that could cause a security breach

[30:15] Secure Coding – Make sure that coding is done securely – making sure that any software developed is secure and free of as many vulnerabilities as possible.

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

Did you know there were 80 identified security incidents, resulting in 34,908,053 compromised records in June 2022 alone!

Standards such as ISO 27001 can help you put measures in place to reduce risk and help set up procedures for data recovery. However, not as many adopt the guidance document ISO 27002 which provides further best practice advice to strengthen your IT Security.

ISO 27002 has recently been updated with 11 new controls that tackle recent emerging technology not covered in ISO 27001:2013.

Today, Mel explains ISO 27002 (Information security, cybersecurity and privacy protection - Information security controls), why it's been updated and gives a high-level overview of the changes.

You'll learn

• The purpose of ISO 27002
• How ISO 27002 works with ISO 27001
• Why ISO 27002 has been updated in 2022
• A basic overview of the changes to controls within ISO 27002:2022

Resources

• ISOlogy Hub
• Blackmores

In this episode, we talk about:

[00:30] A reminder to keep an eye out for future episodes on the upcoming updated version of ISO 27001:2022

[00:52] An introduction to the guidance document ISO 27002

[02:02] Controls from the updated version of ISO 27002 can be implemented right now – not a requirement of ISO 27001 but recommended.

[02:25] Why ISO 27002 has been updated – To bring it up-to-date with the latest technologies and simplification of controls

[03:15] What this means for your Information Security Management System

[03:50] We expect to see the new controls in ISO 27002 to be reflected in the updated version of ISO 27001 coming out later this year.

[4:27] Reminder: ISO 27002 is not a certifiable standard but it is best practice.

[05:00] ISO 27002 had its last major update in 2013 – think how much technology has changed since then!

[06:00] A summary of the changes to controls in ISO 27002

[07:25] New controls added to ISO 27002 highlight that the standard is more then just IT Security – A trait shared with ISO 27001

[09:13] A summary of what categories the 11 new controls fall under

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

The Sustainable Development Goals have been established by world leaders with the hope that we can work together towards a better world by 2030.

The last two episodes provide an overview of all 17 Goals and related ISO Standards that you could align with to meet these goals. But how do you put this into practice? How do you go about aligning your Management System to the SDG's?

Today, Mel explains the role ISO Implementation plays in working towards a better future and shares 5 actions you can take to align your businesses Management System.

You'll learn

• How ISO Implementation can help you align with the SDG's
• Why it's important to show support for the SDG's
• 5 Practical actions you can take to align your Management System with the SDG's

Resources

• United Nations Sustainable Development Goals
• ISOlogy Hub
• Blackmores
• Carbonology

In this episode, we talk about:

[00:46] A reminder to watch the 2 previous episodes to learn about each of the 17 SDG's

[00:52] The importance of ISO's and how they can help work towards a better future, including alignment with the SDG's

[01:24] Find out what SDG's align with certain ISO's on the ISO.org website

[02:19] Recommended action: Look at what your currently certified to and what other ISO Standards of interest that you could adopt to enhance your Management System

[04:40] If you need assistance with aligning to the SDG's or want to implement an ISO – Blackmores can help, and we have resources available on the isologyhub

[05:30] Action 1: Leadership Commitment – Have you made a declaration of commitment to the SDG's? Where have you displayed this commitment?

[07:10] Action 2: Management Review – Include discussions around your SDG commitment within a Management review. Make sure any actions are noted in the meeting minutes.

[08:31] Action 3: Context of the Organization – Consider actions related to SDG's in SWOT and PESTLE's

[10:10] Action 4: Objectives – Set out clear key performance indicators to achieve your commitment to select SDG's. Can be short or long term.

[11:20] Action 5: Operational Controls – Put controls in place that actively work towards achieving objectives related to the SDG's

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

In 2015, world leaders came together to create 17 Sustainable Development Goals (SDG's) which aim to tackle various social, economic and environmental issues, to build a better world by 2030.

What you may not be aware of is the fact that ISO Standards play a big part in the journey towards a better future. Many commonly used ISO Standards already meet certain goals, with more in development.

This is part 2 of our 2-part series on the United Nations Sustainable Development Goals and the ISO standards that support them.

Today, Mel explains the 7 remaining SDGs, the ISO standards that relate to them and how organisations can meet these goals…

You'll learn

• The ISO standards that relate to the sustainable development goals.
• How to align your business with the SDG's.
• The ISO standards that can help you meet the last 7 SDGs.
• Details of the final 7 SDGs and the ISO standards that relate to them.
• How we define what best practice is.
• How ISO standards are developed.

Resources

• United Nations Sustainable Development Goals
• ISOlogy Hub
• Blackmores

In this episode, we talk about:

[00:46] The Sustainable Development Goals set out by the UN.

[02:27] How ISO 9001 and 14001 relate to the SDGs.

[02:56] Goal 10 (Reduced inequalities) and how ISO 26000 (Guidance for social responsibility) relates to it.

[06:04] Goal 11 (Sustainable cities and communities) and the series of standards ISO 37101, ISO 37120, ISO 37122, ISO 37123, and ISO 22301 that can help meet this goal.

[07:50] Goal 12 (Responsible consumption and production) and the related standards ISO 14020 Series, ISO 15392, and ISO 20245.

[10:42] Goal 13 (Climate Action) and the standards that help with climate change and greenhouse gases ISO 14001, ISO 14064, ISO 14067, and PAS 2060.

[14:14] Goal 14 (Life underwater) and the 250 sustainability-related Standards dedicated to Shipping, port waste management and protection of marine life.

[15:30] Goal 15 (Life on land) and the related standards ISO 14001 and ISO 38200.

[16:27] Goal 16 (Peace, justice and strong institutions) and the standards that support this goal ISO 37001, ISO 37301, and ISO 37000.

[18:18] Goal 17 (Partnerships for the goals) and it's relevance to ISO Standards.

[19:43] How ISO standards are developed.

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

The world is facing a crisis: poverty, hunger, inequality and climate change are just some of the issues we need to address.

In 2015, world leaders came together to create 17 Sustainable Development Goals (SDG's) which aim to tackle these issues, to build a better world by 2030.

What you may not be aware of is the fact that ISO Standards play a big part in the journey towards a better future. Many commonly used ISO Standards already meet certain goals, with more in development.

Today, Mel explains what the SDG's are, and how businesses can align themselves with the SDG's with related ISO standards.

You'll learn

• The 17 sustainable development goals set by the UN.
• How to align your business with the SDG's.
• How the SDG's affect our day-to-day lives.
• The ISO standards that can help you meet the SDG's.
• Details of the first 9 SDG's and the ISO standards that relate to them.
• Where the term ISO came from.

Resources

• United Nations Sustainable Development Goals
• What is ISO 20400 - Sustainable Procurement
• How to avoid anti-bribery fines - ISO 37001
• Need support with revamping your Management System? check out our ISO Support Plan
• Need guidance and support with ISO Standards? Isologyhub

In this episode, we talk about:

[01:48] What the sustainable development goals are.

[02:29] When the SDG was established and what it's agenda is.

[03:17] An overview of the 17 SDG's.

[04:48] Where the term ISO came from.

[09:05] How ISO 20400 and ISO 37001 relate to the goal of 'No Poverty'.

[11:25] The ISO standards related to the goal of 'Zero Hunger' including ISO 22000, ISO 26000 and ISO 20400.

[13:05] How ISO 13845 can relate to the goal of 'Good health and well-being'.

[13:53] The first-ever management standard on education ISO 21001.

[15:23] How ISO 26000 can help improve gender equality.

[17:40] The ISO standards for water management that relate to the UN's goal of 'Clean water and sanitation' including ISO 24518, ISO 14001 and ISO 24521.

[19:48] The increase in development of ISO standards in the area of Affordable and clean energy' including ISO 50001 and the ISO 52000 series of Standards.

[21:37] How international standards promote the goal of 'Decent work and economic growth' including ISO 45001, ISO 37001, ISO 9001 and ISO 44001.

[27:48] How international standards promote the goal of 'Industry, Innovation and Infrastructure' including ISO 56002 and ISO 56003

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud

Do you find keeping up with regular annual ISO tasks a struggle?

It's easy to let ISO maintenance slip through the cracks, especially if it's in addition to your primary job role.

If this sounds familiar, then you should consider outsourcing certain areas of your ISO management system to be managed by ISO experts.

Today, Mel explains the areas that should be managed in-house, the areas that can be outsourced, and explains the ISO support plan we offer to help businesses outsource aspects of their management systems.

You'll learn

• How long ISO certifications are valid.
• Why businesses outsource some areas of their management system.
• The different ISO areas you can outsource.
• How to maintain quality when outsourcing internal audits.
• The importance of quantifying the results of your management system.
• The importance of employee engagement in your ISO management system.

Resources

• Need support with revamping your Management System? check out our ISO Support Plan
• Need guidance and support with ISO Standards? isologyhub

In this episode, we talk about:

[01:38] How long ISO certifications are valid and the ISO support plan we provide.

[02:38] Why businesses outsource certain aspects of their management system.

[03:34] What areas you can outsource and what you should keep in-house.

[04:48] Health and safety requirements and risk management needs.

[06:03] The most popular ISO areas that can be outsourced.

[09:27] How to optimise performance through updating management systems.

[09:57] The importance of being able to quantify the results of ISO systems.

[10:54] How to outsource the facilitation of your management review.

[12:15] Employee engagement training that can be outsourced.

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud

5 Steps to revamp your Management System

Has your Management System been left to collect dust? Hidden away so that no one except a select few can access and update it ahead of Surveillance Audits.

If this sounds familiar, then it's time to revamp your Management System to ensure it's incorporated with your core vision and values and encourages engagement from employees on all levels.

Today, Mel takes you through 5 steps that will help to rejuvenate your Management System, including key content considerations, the design and alignment with your company culture.

You'll learn

• How to identify what's essential for your Management System
• How you can incorporate your Unique way of Working
• How to take a collaborative approach to revamping your Management System
• Key considerations for the look, feel and accessibility of your Management System
• How to align your Management System with your company culture, strategy and goals

Resources

• Need support with revamping your Management System? check out our ISO Support Plan
• Need guidance and support with ISO Standards? isologyhub

In this episode, we talk about:

[00:57] What is essential from an ISO perspective

[01:22] How having too much in your Management System can lead to a lack of compliance

[02:20] Remember – If an ISO Standard states 'shall' – you must fulfill this requirement

[02:55] How to establish what's essential to your business – including your way of working

[03:53] Different ways you can add value to your Management System

[05:25] An example of how Blackmores have added value with our Client Success Journey

[07:15] Why collaboration is so important when revamping your Management system

[08:52] How a Quality Circle can assist with a collaborative approach

[10:15] How you can align your company culture, strategy, values and goals within the Management System

[11:32] Why it's important to share the Management system and any related updates

[12:38] Key considerations for the look, feel and accessibility of the Management System

[14:05] Examples of different ways you can display and share your Management System

[15:36] Consider how easy your Management System is to access and navigate

[17:12] Consider different methods of communicating the Management System – i.e. Audio, video, visual, flowcharts ect

Just a reminder, we're offering 6 months free access to the isologyhub for anyone who signs up to an ISO Support Plan!

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

It's not uncommon to see a businesses Management System left to collect dust, either because it's not fit for purpose or simply a carbon copy of an ISO Standard.

Sound familiar? Do you think your business and your employees deserve better? Your ISO Management System should represent your businesses way of saying – "This is what we stand for, this is our vision, values and processes."

Today, Mel explains why it's so vital to ensure your Management System is fit for purpose, and give some examples of where you can add value and reduce risk.

You'll learn

• Pitfalls of an archaic Management System
• Why you should consider revamping your Management System
• How you can update your Management System
• Guidance on what should be included in a Business Management System
• Examples of what could add value or reduce risk for your Management System
• How you can update the look and feel of a Management System

Resources

• Need support with revamping your Management System? check out our ISO Support Plan
• Need guidance and support with ISO Standards? isologyhub

In this episode, we talk about:

[01:03] Examples of poor quality Management Systems Mel's come across

[02:19] The importance of having a bespoke Management System

[03:33] How out-of-date Management Systems can be detrimental

[04:40] Latest offering: A free Management System review and consultation – Simply contact us

[05:05] Why it's important to continually update your Management System

[06:25] How initiatives / functions can get overlooked if they're not referenced in your Management System

[07:38] Guidance on what should be included within your Management System to add value and reduce risk

[08:01] Examples of how a Social Media Policy / Process could be included and how it adds value

[09:45] How we at Blackmores follow our Social Media Process, record results and use the captured data

[11:10] How you can add risk mitigation to your Management System

[12:35] Other reasons why your Management System may be ready for a revamp

[13:10] Guidance on how you can improve the look and feel of your Management System

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

What's in a name?

Is your ISO Management System just called a 'Management System' or is it named to reflect your companies culture and brand?

Sarah Ball, QHSE Consultant shares her views and tips on the power behind a name.

A name is people's first impression of your Brand, System etc, it sets the tone for how people interact with it. So, it's best to give it the time and thought necessary to make sure it makes the right impact.

Today, Mel and Sarah discuss why the naming of a Management system is important and share some great examples.

You'll learn

• The definition of a Management System
• Why naming your Management System is so important
• How certain Management System names can dissuade engagement
• Guidance on how to select a Management System name
• Examples of unique Management System names
• How getting a Management system name and format right can help share a businesses core vision and principles

Resources

• Blackmores
• Isologyhub

In this episode, we talk about:

[01:05] How a Management System without a name can be detrimental

[02:39] A reminder of the definition of a Management System

[03:03] Why naming a Management System is so important to a business

[04:41] How including 'Management' in the name can alienate people from engaging with the System

[06:57] Guidance on selecting a Management System name

[09:30] Some examples of unique Management System names Sarah has come across

[11:18] Examples of some names and Acronyms we use at Blackmores

[12:01] Important considerations when creating acronyms – including taking account of any existing relevant industry related ones

[13:25] Why naming the Management System should be a collaborative effort

[14:54] Why the format of a Management System is important

[16:09] How getting the Management System name and format right can help share a businesses core vision, principles and culture

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List

This episode Mel is joined by the CEO and Founder of SalesEnabla, and part-time Adventurer Matt Garman to talk about creating an awesome Sales Process.

Sales are an intrinsic part of any business, and while you may be happy with your current way of working, there is a lot you can do to optimize your process to increase the quality of your leads.

Today, Mel and Matt dive into Matt's book 'Learning the Ropes' to explain the four pillars of Sales and how you can use these as a basis to improve your Sales Process.

You'll learn

• Matt's previous endurance challenges and preparing to undertake the World's toughest row - 3000 miles across the Atlantic - The Talisker Whiskey Atlantic Challenge
• Why Matt wrote 'Learning the Ropes'
• Matt's past experience in Sales and his main pain points
• The four pillars of Sales - Vision, People, Process and Management
• Why creating a Process for sales is so important
• The importance of the 'Discovery' meeting
• What does a good Discovery look like?
• Other key qualities needed for an awesome Sales Process
• What is SalesEnabla and how can companies use it

Resources

• OceanDadVenture
• Learning the Ropes Book
• SalesEnabla

In this episode, we talk about:

[03:02] Matt's past adventures and his latest challenge 'Ocean Dadventure'

[06:42] How Matt's epic challenge is supporting two incredible charities -Prostate Cancer UK and WOLO (We Only Live Once) foundation

[08:45] The reason why Matt wrote 'Learning the Ropes'

[09:07] Matt's past in Sales and his takeaway from experience

[11:50] An explanation of the four pillars – Vision, People, Process and Management

[17:00] The purpose for creating a Sales Process or 'Playbook'– and why it's especially important for smaller businesses

[18:28] The importance of having an effective 'Discovery meeting' to ascertain the viability of opportunities

[19:27] What a good 'Discovery meeting' looks like

[21:15] What skillset and mindset are needed for an awesome Sales Process

[23:30] An explanation of SalesEnabla and how it can be utilised

[25:49] How to avoid a high turnover in sales representatives

We'd love to hear your views and comments about the ISO Show, here's how:

• Share the ISO Show on Twitter or Linkedin
• Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one.

Subscribe to keep up-to-date with our latest episodes:

Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List