Auditing

Internal auditing is quite a comprehensive process for businesses usually conducted before the organisation applies for an ISO certification or any other certification. It is intended to help the managers discover flaws or nonconformities in their management system. Therefore, auditing is necessary when you implement a dedicated management system like ISO 9001, ISO 14001 or […]

An information security audit is a thorough assessment of an organisation’s data processes and information security practices or infrastructure by a dedicated technical team. The auditing is required to verify that those processes and infrastructure comply with the information security regulations or standards such as ISO 27001 that apply to their organisation. Since information assets […]

Organisations, regardless of the size, nature of business, or operations need to be careful about information security risks and IT failures. Any breach of security or loss of data can cost time as well as money for the business, which it may or may not be able to recover. If your organisation has a dedicated […]

I received an email today from a Perth based company asking the following question: Hi Mike, I was trolling the internet and came across your site. Very impressive feedback. Will you please advise me, “Must a company have their own QA Manager [employee] in order to gain and maintain ISO9001:2008 compliance?” another way of asking is does […]