Articles
Longer pieces from MSCi consultants on a single standard, sector or certification question, written for the people who have to implement it.
- 13 tháng 9, 2026Inside an Automotive OEM Vendor Cybersecurity Assessment: The 19 Control Families and What They Actually Ask ForThe nineteen control families in an automotive vendor cybersecurity assessment, where the structure came from, and why good controls still score zero.Read the article
- 13 tháng 9, 2026Cybersecurity Across the Automotive Lifecycle: Production, Operational Technology and the Scope GapGovernance, the shop floor and the product in the field: where automotive cyber exposure actually sits, and why an ISO 27001 certificate may not reach it.Read the article
- 12 tháng 9, 2026What a certification audit actually samplesAuditors do not read your manual cover to cover. They sample, and the sample is predictable. Knowing what gets pulled changes how you prepare.Read the article
- 12 tháng 9, 2026Why a second standard costs far less than the firstClauses 4 to 10 are shared across the ISO management system standards. That is why the second certificate costs far less than the first.Read the article
- 12 tháng 9, 2026Certification for Indian exporters: what buyers actually ask forWhich standard an Indian exporter needs is decided by the buyer, the destination market and the sector — not by which certificate is cheapest to obtain.Read the article
- 12 tháng 9, 2026Mining supply chains and ISO 45001 in MongoliaIn Mongolia, safety certification usually arrives before quality certification, because an international operator asked for it. What that changes about the project.Read the article
- 12 tháng 9, 2026Information security certification in Nigeria and South AfricaTwo regulators, two statutes, one management system. What NDPA and POPIA ask for, and where ISO 27001 and ISO 27701 do the work.Read the article
- 12 tháng 9, 2026Food safety: which scheme, and why the buyer decidesISO 22000, FSSC 22000, BRC and HACCP overlap heavily and are not interchangeable. The difference that matters is who recognises which.Read the article
- 12 tháng 9, 2026Climate disclosure and the management system underneath itAssured emissions reporting asks a question most organisations cannot answer: where did that number come from? ISO 14064 and ISO 50001 are the answer.Read the article
- 12 tháng 9, 2026What officers owe under work health and safety lawThe due diligence duty is personal, cannot be delegated, and is evidenced by ordinary records. What boards in Australia and New Zealand should keep.Read the article
- 12 tháng 9, 2026AI governance before the AI strategyMost organisations deploying AI cannot list the systems they already use. ISO 42001 starts there, which is why it is more useful than it sounds.Read the article
- 12 tháng 9, 2026Choosing a consultant: five questions that reveal the answerEvery consultancy claims experience and success rates. These five questions produce answers that are hard to fake, including from us.Read the article
- 30 tháng 8, 2026Management system consulting across six marketsThe clauses do not change between India, Mongolia, Australia, Nigeria, South Africa and the United States. Almost everything around them does.Read the article
- 30 tháng 8, 2026From a self assessment to a certificate: how the work runsThe stages between a fifteen-minute readiness checklist and an accredited certificate, what each one produces, and who does the work at each step.Read the article
- 16 tháng 8, 2026ISO 27001 Certification: Process, Cost and Timeline Explained in Simple LanguageISO 27001 certification can seem complicated because many organisations think it is mainly about technology and IT security. In reality, it is a management system standard that helps organisations protect their information and manage security risks effectively.Read the article
- 16 tháng 8, 2026ISO 22000 Certification: What It Involves, Costs and How Long It TakesISO 22000 can be challenging because it brings together two areas that organisations often manage separately: a food safety management system and HACCP.Read the article
- 16 tháng 8, 2026ISO 22301 Certification: Requirements, Cost and TimelineISO 22301 is the international standard for business continuity management. Organisations usually consider it for two main reasons: either a customer requires it, or an unexpected incident has occurred and the management wants to ensure the business can continue operating during future disruptions.Read the article
- 16 tháng 8, 2026ISO 22301 clause by clause: what auditors examineISO 22301 follows a similar structure to other management system standards. However, auditors focus mainly on Clause 8, especially the Business Impact Analysis (BIA) and the exercise and testing programme.Read the article
- 16 tháng 8, 2026ISO 21001 Certification: Requirements, Costs and Implementation TimelineISO 21001 certification helps educational institutions improve learning quality, meet learner needs, and enhance stakeholder confidence through structured management and continual improvement.Read the article
- 16 tháng 8, 2026ISO 41001 Certification: Requirements, Cost and TimelineISO 41001 is an international standard for Facility Management Systems (FMS). Although it is not as widely known as some other ISO standards, it helps organisations manage their facilities and related services more effectively.Read the article
- 16 tháng 8, 2026ISO 42001: Understanding ISO Requirements for AI Management SystemsISO 42001 uses the common management system structure with a control set in its annex, structurally similar to ISO 27001. What differs is where the substance lies.Read the article
Not sure which standard applies to you?
Send us the requirement you have been given. We will tell you which standard satisfies it, what it takes and what it costs, before you commit.