-
Continue reading →: ISO standards explained: 22 short videos in plain English
A short plain-English video for each of 22 ISO standards, from ISO 9001 and ISO 27001 to ISO 42001, ISO 19011 and ISO/IEC 17025.
-
Continue reading →: Security codes of practice explained: 15 short videos
Short videos explaining 15 UK security codes of practice, from BS 10800 and BS 7499 to BS 7858 screening and BS 8418 remote CCTV.
-
Continue reading →: Employment Rights Act 2025: what changes in 2027 and what small employers should update nowWhat the Employment Rights Act 2025 has already changed, what arrives in 2027, and the contracts, handbooks, and probation updates to make now.
-
Continue reading →: The new data protection complaints duty: is your process compliant?
Since 19 June 2026, every UK organisation needs a data protection complaints process. What the law requires, what the ICO expects, and a simple checklist.
-
Continue reading →: Critical suppliers and the new UK cyber law: what small businesses in the supply chain should prepare
The Cyber Security and Resilience Bill brings MSPs and critical suppliers into UK cyber law. What it covers, where it stands, and how SME suppliers can prepare.
-
Continue reading →: The new duty to prevent harassment by customers and the public: a practical guide for employers
From 30 October 2026, employers must take all reasonable steps to prevent sexual harassment and harassment by third parties. What changes and what to do now.
-
Continue reading →: SIA licence qualifications are changing in 2027: what security employers should plan for now
The SIA proposes first aid as a licence condition, an English test, and updated training. What’s proposed, the timeline, and what security employers should do now.
-
Continue reading →: Martyn’s Law is coming in 2027: a practical checklist for security companies
Martyn’s Law is expected in spring 2027. What venues must do, how the SIA will regulate it, and a practical checklist for the security companies supporting them.
-
Continue reading →: Companies House identity verification: the deadline every director must meetThe Companies House identity verification transition ends 17 November 2026. What directors and PSCs must do, how to verify, and what happens if you don’t.
-
Continue reading →: ISO 28000:2022 in plain English: supply chain security for logistics, warehousing, and security firmsISO 28000:2022 explained for hauliers, warehouses, freight forwarders, and security firms: what it covers, the AEO link, and how certification works.
Hello,
I’m Craig
Welcome to the ISO and Compliance Blog. I have spent over 20 years in compliance, specialising in accreditation and business growth. This blog is designed to help SMEs on their journey to top-notch compliance. Any questions, feel free to drop me an email at Craig@CAWConsultancy.co.uk.
My companies
- CAW Consultancy: ISO and accreditation consultancy
- CAW Digital: paperless systems, apps and dashboards
- Screen My Staff: BS 7858 screening and workplace wellbeing
- ISO Training Institute: online ISO and compliance courses
Let’s connect
Stay ahead of your next audit
Plain-English ISO and compliance guidance, straight to your inbox. No jargon, no sales pitch.
