ISO 9001:2015 specifies requirements for a quality management system when an organisation:

a) needs to demonstrate its ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements, and

b) aims to enhance customer satisfaction through the effective application of the system, including processes for improvement of the system and the assurance of conformity to customer and applicable statutory and regulatory requirements.

All the requirements of ISO 9001:2015 are generic and are intended to be applicable to any organisation, regardless of its type or size, or the products and services it provides.

Awareness of environmental problems is growing in most countries and it is believed that current development patterns cannot be sustained in the long term. Governments are increasingly enacting legislation aimed at protecting the environment, and customers are requiring their suppliers to incorporate best practices and demonstrate compliance with environmental requirements.

The publication of the ISO 14001 standard for environmental management systems (EMS) has proved to be very successful, as it is now implemented in more than 159 countries and has provided organisations with a powerful management tool to improve their environmental performance. More than 324 000 organisations have been certified worldwide against ISO 14001 at the end of 2014, which is an increase of 7 % compared to 2013. Many companies have improved their operations by reducing the adverse impact their activities, processes, products and services have on the environment using a systematic approach embodied in ISO 14001.

Keeping sensitive company information and personal data safe and secure is not only essential for any business but a legal imperative. Many organisations do this with the help of an information security management system (ISMS). The international guidance standard for auditing an ISMS has just been updated. 

Software attacks, theft of intellectual property or sabotage are just some of the many information security risks that organisations face. And the consequences can be huge. Most organisations have controls in place to protect them, but how can we ensure those controls are enough? The international reference guidelines for assessing information security controls have just been updated to help.

ISO 45001:2018 is applicable to any organisation that wishes to establish, implement and maintain an OH&S management system to improve occupational health and safety, eliminate hazards and minimise OH&S risks (including system deficiencies), take advantage of OH&S opportunities, and address OH&S management system non conformities associated with its activities.

ISO 45001:2018 helps an organisation to achieve the intended outcomes of its OH&S management system. Consistent with the organisation's OH&S policy, the intended outcomes of an OH&S management system include:

a) continual improvement of OH&S performance;

b) fulfilment of legal requirements and other requirements;

c) achievement of OH&S objectives.

ISO 50001 is based on the management system model of continual improvement also used for other well-known standards such as ISO 9001 or ISO 14001. This makes it easier for organisations to integrate energy management into their overall efforts to improve quality and environmental management.

ISO 50001 provides a framework of requirements for organisations to:

• Develop a policy for more efficient use of energy
• Fix targets and objectives to meet the policy
• Use data to better understand and make decisions about energy use
• Measure the results
• Review how well the policy works, and
• Continually improve energy management.