Chris Eden

ISO27001 Information Security Management Executive Overview

It is generally accepted that information is the greatest asset any organisation has under its control.   Managing Directors are aware that the supply of complete and accurate information is vital to the survival of their organisations Today more and m... Read >

Biometric Security

It is a fact that we consultants get through quite a few laptops each year. They get broken or dropped or in extreme cases both, particularly if they lock-up. I previously had a netbook, which is great for collecting email when on the move, light t... Read >

ISO27001 and Password Controls

I visit quite a number of businesses each year and those seeking certification to ISO27001, the information security management standard, are rising in numbers. The first step in any 27001 assignment involves a gap audit to see how near (or far) the co... Read >

ISO9001 and Non UKAS Certification Companies

"The United Kingdom Accreditation Service is the sole national accreditation body recognised by government to assess, against internationally agreed standards, organisations that provide certification, testing, inspection and calibration services. Accredi... Read >

Security at Airports

The recent news with suspect toner cartridges has meant that airport security has been stepped up and perhaps I should have taken this into consideration during my trip back from Germany. All was well going out and the usual security check of taking... Read >

New Auditing Standard ISO 19011 - A Preview

The latest version of the ISO19011 "Guidelines for Auditing Management Systems" is due to be published next year. Users of this standard will note that the title, which was "Guidelines of quality and/or environmental management systems auditing" now refle... Read >

Document Control

I have used Microsoft Office is its various forms for many years and have found it to be very useful for documents, spreadsheets etc, and recently upgraded to the latest version 2010.   I expected it to do all the things that the older versions did and wa... Read >

Security Risks and Social Networks

MySpace, Facebook, Linkedin and Twitter, used by millions yet the risks are not fully understood or appreciated. Apart from the obvious threats from Trojans, viruses, stolen passwords and other malware, there is also the human risk of hurried messaging wh... Read >

ISO27001 and loss of data

Once again there have been cases where sensitive data has been left on trains or in restaurants and most of these are either laptops, or memory devices. The sheer volume of data loss is reaching epidemic proportions. ISO27001 is a good system to have i... Read >

Health and Safety - Gliding

Readers of this blog will know that I took up gliding in May this year and I have notched up over 40 flights on my way to being allowed to fly solo. It is fair to say that I may have been a bit optimistic in thinking that I would have mastered all the ... Read >

Quality Manual

I am often asked about quality manuals and what they should contain. The ISO9001 Standard states that the quality manual should have as a minimum: The scope of the quality management system, including details of and justification for any exclusions; ... Read >

Protect your Computer Systems

Apparently there is a new and disastrous Trojan waiting to damage our systems. This one is called ZEUS and it waits patiently on our systems for us to enter bank details and then exports these to a collection website for use by the crooks. It is furth... Read >

How Gliding has changed my view of Management Standards.

Regular readers of this blog will know that I recently started instruction to be a glider pilot. Things have moved on nicely and the very patient instructors at the Essex and Suffolk Gliding Club have given me both the confidence to continue with the m... Read >

Training is key to German Success - ISO9001

We have Clients in Germany and whenever I carry out audits for them or on their behalf at their suppliers, I am inevitably pleased to see how much more training is provided to workers than a similar company in the UK. It seems that all workers receive... Read >

The Environmental Management Standard ISO14001 - Emergency Preparedness and Response

One of the requirements of the Environmental Standard ISO14001:2004 is that any organisation putting this standard into operation will have a plan to deal with emergency situations and accidents. The plan sets out the identification of potential enviro... Read >