For anyone that’s met me, they’ll know that I’m passionate about the value of certifications and standards. Whether it’s Cyber Essentials, ISO9001, OHSAS18001, Safe Contractor, FORS – all have a value to a business.
Some are international standard applicable across any industry, others are industry specific. Some may be a requirement in order to enter a supply chain and will be adopted grudgingly by an organisation. For organisations who just need the ‘certificate on the wall’, there is likelihood that they are not realising the full benefits that adoption of a standard may bring.
For Risk Evolves, I took the decision that we should adopt some of the standards that are a cornerstone to any organisation :
- ISO9001 – the worlds leading standard on quality management,
- Cyber Essentials – to make sure that the information that we hold on our clients and employees is kept securely,
- and IASME, aligned to ISO27001, the information security standard and now with an assessment on GDPR compliance.
So why did we do this? We’re a small business and for many this would be seen as a burden, both financially and in time. Taking ISO9001 as an example, the reasons are simple.
- They drive efficiency. We’re a process-based organisation. Sounds scary but all it means is that we follow the same steps repeatedly. Whether it’s customer engagement, implementing ISO9001 for a client or even invoicing, we do the same thing time and time again. And that reduces the risk of mistakes. Mistakes typically cost money.
- We meet the requirements of our Clients. By understanding what our Clients want before we start work, we’re likely to meet, or exceed, their expectations. If you don’t understand what your client is expected you to do, then it costs to put it right
- When we do get it wrong (and we’re proud that those instances are small in number), we understand why we got it wrong. And fix it to ensure that it doesn’t happen again.
- We check that our clients are satisfied. Happy Clients tell others, which is all good for business.
ISO9001 was revised in 2015 and has really ‘come of age’. It’s moved away from being heavy on documentation, has become very much more services based and ensures that ‘Top Management’ are involved in the process.
For those organisations who have yet to transition from the 2008 version of the standard, you have less than 2 months to do so. The 2008 version of the standard expires at the end of September, as will your certificate. Call us and we’ll take you through the transition process.
Oh .. and if you find all the letters and numbers confusing, then don’t panic. Over the next few weeks we’ll be explaining the standards in easy to read, jargon free posts that will also explain how some of them interlock with each other together with a summary of the benefits.
