Advertise on podcast: Exploring Standards with Assent

The EU AI Act is changing how organisations develop and use artificial intelligence. But what does the legislation mean in practice, and what steps should businesses be taking to prepare? In this episode of Exploring Standards, Jess welcomes Dan Sampson back to the podcast for the second time to discuss the EU AI Act, its requirements and what organisations need to consider when using or developing AI. They explore the four AI risk categories, the responsibilities placed on organisations, and how ISO 42001 can support a structured approach to AI governance and compliance. In this episode, we cover: What the EU AI Act is and why it matters The four AI risk categories, with real-world examples What the legislation means for organisations developing and using AI How ISO 42001 can support AI governance and compliance Practical steps to help organisations prepare Common misconceptions about the EU AI Act Whether your organisation is developing AI systems or using AI in its day-to-day operations, this episode will help you understand the legislation and consider what it means for your business.   Connect with Dan: LinkedIn - www.linkedin.com/in/daniel-s-31775b205   Website - www.sampsoniso.co.uk   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement #EUAIAct #ISO42001 #AIGovernance #ExploringStandards

In this episode of Exploring Standards, host Jess sits down with Kathy Clements from Assent Risk Management — creator and author of the new IDEA Standard (Inclusion, Diversity, Equity, and Accessibility) — to break down what the standard is, why it was created, and how any organisation can start implementing it. Kathy explains how the IDEA Standard brings together four critical areas into one structured, ISO-style framework that's designed to be low-cost, low-time-commitment, and accessible to businesses of every size, from sole traders to large enterprises. Topics covered: What the IDEA Standard is and how it works The gaps in existing frameworks that led to its creation Why the Equality Act protects everyone — not just specific groups How the standard clips into existing ISO certifications What IDEA looks like in practice: recruitment, accessibility, and workplace design The self-serve Pledge Mark assessment process Available formats: downloadable standard, template pack, guidance notes, and the Implementer Course Find out more and get the standard at www.ideamark.co.uk Connect with Kathy Clements on LinkedIn   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

ISO 9001:2026 has officially been published, so what does the new version actually mean for organisations already working to ISO 9001:2015? In this episode of Exploring Standards, Jess is joined by Robert Clements from Assent Risk Management to take a practical look at the latest update to the world's most widely used quality management standard. We talk through the key changes in ISO 9001:2026, what they mean in practice, and what organisations should be thinking about now as they prepare for the transition. In this episode, we cover: What ISO 9001:2026 means for organisations currently certified to ISO 9001:2015 The key changes in the new edition, including quality culture, risks and opportunities, leadership, change management, organisational knowledge and improvement Whether organisations need to make major changes to their existing QMS How the three-year transition period works What to expect from certification bodies as they prepare for the new standard Different approaches to transitioning, from moving early to aligning the transition with your next recertification What the update means for customers and supply chains Why your ISO 9001:2015 certification remains valid during the transition period   Show notes & resources 📅 ISO 9001:2026 Webinar with SGS 8 October 2026 | 1:00pm https://streamyard.com/watch/3X84tJyR3SSw 📺 Can't make the webinar live? The recording will be available to watch on our YouTube channel.   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

What does an ISO 27001 or SOC 2 assessment actually involve, and how can organisations prepare for it? In Part 2 of this two-part discussion, we take a closer look at the assessment process for both ISO 27001 and SOC 2. Sam Mather from Assent and Rob Hall from Tempo Audits explore what auditors look for, the differences between an ISO 27001 audit and a SOC 2 assessment, and the role of evidence and preparation. The conversation also covers SOC 2 Type 1 and Type 2 assessments, how organisations can prepare for a successful audit or certification, common challenges businesses face, and why planning ahead can make such a difference. Originally recorded as part of an Assent Risk Management webinar, this conversation has been adapted into a two-part episode of Exploring Standards. 🎧 Listen to Part 2 to hear practical advice on preparing for ISO 27001 and SOC 2, avoiding common pitfalls, and approaching your assessment with confidence. In this episode: What auditors look for during ISO 27001 and SOC 2 assessments The differences between the ISO 27001 audit and SOC 2 assessment process SOC 2 Type 1 vs Type 2 How to prepare for a successful audit or certification The importance of evidence and preparation Common challenges when implementing ISO 27001 and SOC 2 Practical advice for organisations preparing for assessment Contact Assent: Website: www.assent1.com Email: [email protected] Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement   Contact Rob: www.tempoaudits.com https://www.linkedin.com/in/robjshall/

ISO 27001 and SOC 2 are two of the most in-demand information security frameworks, but how do they actually compare, and how do you know which one your organisation needs? In this episode of Exploring Standards, host Jess is joined by Sam from Assent Risk Management and Rob Hall from Tempo Audits to break down the similarities and differences between these two frameworks. They cover the shared risk-based approach and overlapping controls both frameworks require, the key methodology differences (ISO 27001's management-system approach vs. SOC 2's focus on control effectiveness), and why customers request one, the other, or both, from industry mandates and customer location to commercial and cost considerations like SOC 2's trust services criteria. This is part one of a two-part series adapted from a live Assent Risk Management webinar. Stay tuned for part two, where the conversation continues. Contact Assent: Website: www.assent1.com Email: [email protected] Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement   Contact Rob: www.tempoaudits.com https://www.linkedin.com/in/robjshall/

In this episode of Exploring Standards, host Jess is joined by Derek Geyer from DHG Quality Consultants to break down BS 99001, the quality management standard built specifically for the construction and built environment sector. Derek explains why ISO 9001, while valuable, simply wasn't designed for the complexity of construction, with its temporary teams, long supply chains, changing designs, and overlapping trades. BS 99001 steps in to fill that gap, offering a practical, project-specific framework that reflects how construction projects actually work. In this episode, we cover: What BS 99001 is and how it sits alongside ISO 9001 Who needs it, from main contractors to design consultants and clients How it's becoming a differentiator in tendering and PQQ processes The biggest gaps in traditional quality management when applied to construction Why the built environment needs its own tailored approach Key principles that make BS 99001 different, from project-specific quality planning to evidence, traceability, and interface management The role of collaboration across contractors, consultants, and suppliers Practical improvements organisations see when it's implemented properly Common misconceptions and challenges when first adopting the standard Guest: Derek Geyer, DHG Quality Consultants Derek Geyer has 30 years of experience in the construction industry. Having worked across site, office, and project management roles, Derek spent the last decade focusing exclusively on quality in construction, conducting gap analyses, supporting organisations through standard implementation, and working with those involved in the BS 99001 pilot scheme. DHG Quality Consultancy Website: https://www.dhgqualityconsultancy.com/   Derek LinkedIn: https://www.linkedin.com/in/derek-geyer-cqp-mcqi-89b3b4124/ Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess sits down with Kit Wells, lead assessor for ISO 9001, 14001, 45001, and 50001, and an implementer, auditor, and trainer for ISO 55001, to demystify asset management and explore how this standard is driving real business results across industries. Kit breaks down what ISO 55001 actually means in practice, from creating a Strategic Asset Management Plan (SAMP) that links company-wide objectives right down to individual operational tasks, to shifting organisations from reactive firefighting to proactive, risk-based maintenance. In this episode, you'll hear: What ISO 55001 is and why asset-heavy industries are adopting it The power of the SAMP and why Kit wishes every standard had one Common implementation challenges and the reason implementations fail How ISO 55001 integrates with ISO 9001, 14001, 45001, and beyond A real-world example of how better maintenance scheduling saves significant Practical first steps for organisations starting their 55001 journey   Contact Kit: https://littlegreenconsulting.com/ https://www.linkedin.com/company/little-green-consulting-limited/   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess sits down with Tony Allen, Chief Executive of the Age Check Certification Scheme, to unpack the world of age assurance and the international standard ISO 27566. Tony explains the critical difference between age verification, age estimation, and age inference, and why the rise of the internet has transformed what was once a straightforward check at a shop counter into a complex, global challenge. From protecting children accessing content online to ensuring privacy and avoiding state surveillance, the conversation covers the competing pressures organisations face when implementing effective age assurance systems. They also dig into ISO 27566, a three-part standard developed by ISO, IEC, and ITU, exploring its five core characteristics and how it gives organisations a framework to implement trustworthy, technology-neutral solutions. Tony shares what the certification process looks like in practice, who it's designed for and why independent certification carries far more weight than self-declaration. Key topics covered: The history of age assurance from the 1836 Gin Acts to the modern internet Age verification vs. age estimation vs. age inference The global regulatory landscape driving online safety requirements What ISO 27566 requires and why Part 1 is freely available How the Age Check Certification Scheme tests and certifies products Where age assurance standards are headed next Contact Tony: Linkedin: https://www.linkedin.com/in/tonyallenctsp/   ISO 27566 Standard: https://www.iso.org/standard/88143.html   Age Assurance Certified Providers: https://accscheme.com/registry/age-assurance/    ISO 27566 Certification Process: https://accscheme.com/services/iso-27566-1-certification/    Online calculator for ISO 27566 audit effort: https://accscheme.com/iso-iec-27566-1-audit-effort-calculator-accs/    Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess is joined by Rob Clements and Danny Lee to discuss the launch of Vaelo Aerospace and the growing opportunities within the aerospace and defence sectors. The conversation explores why Vaelo was created, the gap it aims to fill in the consultancy market, and why aerospace requires a specialist approach to quality, compliance, and supply chain management. Rob and Danny share their backgrounds in standards, aerospace, and compliance, and explain how organisations can position themselves to become trusted suppliers within the aerospace and defence supply chain. The episode also introduces the key aerospace quality standards, including AS9100, AS9110, and AS9120, and discusses how these standards help manufacturers, maintenance organisations, and distributors demonstrate capability, consistency, and trust. The discussion covers the importance of risk management, supply chain assurance, traceability, cybersecurity, and supplier approvals in a sector where quality and safety are critical. With significant investment planned across the UK defence and aerospace industries, Rob and Danny explain why now is an important time for organisations to consider entering the sector, and how specialist support can help businesses bridge the gap between their current capabilities and the requirements of major aerospace and defence customers. Whether you're already operating in aerospace, looking to expand into the sector, or simply interested in the role standards play in highly regulated industries, this episode provides valuable insight into the opportunities and challenges facing the aerospace supply chain today.   Contact Vaelo LinkedIn: https://www.linkedin.com/company/vaelo-aerospace/ Website: https://www.vaeloaerospace.com/ Email: [email protected]

In this episode of Exploring Standards, host Jess is joined by Rob Clements, CEO and Director of Assent Risk Management, for a fascinating discussion on how ISO consultancy has evolved over the past 20 years. Rob shares how he entered the industry from an IT background during the rise of ISO 27001 and information security management systems, a very different route from the traditional quality management pathway. Together, Jess and Rob explore the journey from paper-based management systems and ring binders to shared drives, specialist software platforms, and remote collaboration tools that have transformed the way organisations implement and maintain ISO standards. The conversation also examines how client ownership has changed over time, with businesses now taking a much more active role in managing their own compliance systems. Rob discusses the growing trend of outsourced compliance functions, including Data Protection Officers and Quality Managers, and the value they can bring to organisations. Finally, the episode explores the role of artificial intelligence in ISO consultancy, from the productivity gains and efficiencies it can deliver to the risks of over-reliance. Rob shares why, despite rapid technological advances, human expertise, judgment, and experience remain essential to achieving meaningful compliance and successful certification.   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards is a recording of a webinar hosted by Assent Risk Management in partnership with ISOQAR, exploring the upcoming changes to ISO 14001:2026 and what organisations need to know to prepare. Featuring Robert Clements from Assent Risk Management and Natalie Walker from ISOQAR, this session brings together both consultancy and certification perspectives to cut through the speculation and focus on what is actually changing within the standard, what those changes mean in practice, and how organisations can position themselves for a smooth transition. The conversation covers the key updates expected in ISO 14001:2026, how certified organisations can start preparing now, and what businesses considering certification should be thinking about before beginning implementation. The speakers also share insights into how certification bodies are likely to approach the transition process and what organisations can expect during the transition period. The conversation covers the key updates expected in ISO 14001:2026, how certified organisations can start preparing now, and what businesses considering certification should be thinking about before beginning implementation. Robert and Natalie also share insights into how certification bodies are likely to approach the transition process and what organisations can expect over the coming years. Whether you already hold ISO 14001 certification or are exploring environmental management systems for the first time, this episode provides practical guidance to help you understand the direction of travel and prepare with confidence. Recorded as part of a live webinar hosted by Assent Risk Management and ISOQAR, the session also includes audience questions and expert insights into the future of environmental management and ISO 14001 certification.   Contact ISOQAR: https://isoqar.com/ ISOQAR 14001 Training: https://isoqar.com/training/iso-courses/ ISOQAR LinkedIn: https://www.linkedin.com/company/isoqar/   Digital.Lorators Free ISO 14001:2026 Awareness Course: https://digital.lorators.com/courses/iso-140012026-awareness-course/   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk YouTube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards is Part 2 of a live recording from the in-person event, “ISO 9001: Now and Into the Future,” hosted by Assent Risk Management in collaboration with Interface NRM. Featuring Rob Clements from Assent Risk Management and Ryan Stevens from Interface NRM, this session continues the discussion from Part 1, bringing together both implementation and certification perspectives on one of the world’s most widely used standards. In Part 1, the conversation explored what ISO 9001 is, why it remains widely adopted across the UK, and its role in supply chains and public-sector tenders. It also covered the upcoming 2026 revision, including key timelines and expected updates, and why organisations should view the changes as an evolution rather than a major overhaul. In this episode, the focus shifts to real-world implementation. The speakers discuss the most common audit findings and pitfalls organisations face, insights from internal audit data across the last 12 months, and practical challenges such as document control, training records, and customer feedback in B2B environments. The episode also walks through the ISO 9001 certification process and what the transition to the 2026 revision is expected to look like in practice, including preparation steps and transition timelines. The discussion closes with practical reassurance for certified organisations, emphasising that most businesses already have strong foundations in place, and that the upcoming changes are expected to be manageable with the right preparation. Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk YouTube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards, is a recording from an in-person event, “ISO 9001: Now and Into the Future,” hosted by Assent Risk Management in collaboration with Interface NRM. Featuring Rob from Assent Risk Management and Ryan from Interface NRM, this session brings together both implementation and certification perspectives on one of the world’s most widely used standards. The episode begins with a clear breakdown of what ISO 9001 is, why it remains so widely adopted across the UK, and the role it plays in supply chains and public sector tenders. From there, the conversation turns to the upcoming 2026 revision, including timelines, expected updates, and why organisations should see this as an evolution rather than a major overhaul. Key themes include the growing focus on quality culture and ethics, new climate-related requirements, clearer separation of risks and opportunities, and a more structured approach to change management. The speakers also cover the core requirements of ISO 9001 from a practical, consultancy perspective, along with reassurance and advice for organisations already certified. Stay tuned for part two, where the discussion continues.   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

The ISO 14001 standard has been updated, and there's a lot of noise around it, but should you be worried? In this episode, we break down exactly what's changed, what it means for your business, and why the transition is far more manageable than you might think. In this episode we cover: What ISO 14001 is and why it matters The key changes in the 2026 update (spoiler: it's not as dramatic as 2015) Why "lifecycle thinking" is now front and centre How risks, opportunities, aspects & impacts have been restructured The new planning of changes clause What currently certified organisations need to do next Why mindset matters more than documentation The big message: Don't panic. You have approximately three years to transition, and certification bodies need to be trained first anyway. This update is a refinement, not a revolution. 🔗 Interested in our Early Adopter Scheme (discounted rates for new or transitioning certifications)? Get in touch using the link below. https://www.assentriskmanagement.co.uk/contact/ Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement Subscribe for more episodes exploring standards, compliance, and governance topics!

In this episode of Exploring Standards, host Jess sits down with Tobias Mielke, Global Product Manager at TÜV Nord, to explore one of the most overlooked dimensions of information security - culture. While many organisations treat ISO 27001 as a compliance checkbox, Tobias makes the case that the standard is actually a powerful framework for embedding security into the DNA of your organisation. From phishing emails to access controls, real security starts with how people think and behave when no one is watching.   What You'll Learn What ISO 27001 is and why every organisation, regardless of size or sector,  needs to take information security seriously The difference between having security policies and actually having a security culture Why leadership buy-in isn't just helpful,  it's essential for any ISMS to succeed How the risk assessment process helps employees understand their personal role in protecting information Which Annex A controls typically require the biggest cultural shift (and why access management and incident reporting top the list) How to embed security controls into daily habits rather than treating them as annual compliance exercises The real-world external benefits of a strong security culture, from customer trust to commercial advantage How to measure whether your security culture is genuinely improving, not just audit-ready The single most important first step any organisation can take tomorrow to start building a real security culture   Key Takeaway Security culture isn't built through policy documents,  it's built through people. When leadership visibly champions information security as a business priority, and when employees understand the why behind the controls, ISO 27001 transforms from a compliance label into a practical roadmap for lasting organisational change.   About Tobias Tobias Mielke is Global Product Manager at TÜV Nord Group, based in Germany, where he oversees the technical development and ongoing support of a portfolio of management system standards, including ISO 27001 (Information Security Management Systems), ISO 27701 (Privacy Information Management), ISO 22301 (Business Continuity Management), and ISO 42001 (AI Management Systems). In addition to his product management role, Tobias works as an ISO Lead Auditor for information security and related standards, with hands-on experience certifying organisations across multiple sectors, including critical infrastructure.   Connect with Tobias: Website: https://www.tuv-nord.com/uk/en/ LinkedIn: www.linkedin.com/in/tobiasmielke Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement Subscribe for more episodes exploring standards, compliance, and governance topics!