So how different is it from ISO 9001-2015 and what are the main changes organisations need to be aware of?

Yeah, so obviously it came out yesterday, so we've got a copy here in the office, and we're going through that and getting to grips with it ourselves.

But as you said, we did have some warning.

We had the final draft and the draft before that, and the changes between those versions, those drafts, were minimal as well.

So we've got a fairly good idea of what we expected, and that's what we're seeing in the published version.

So to run through a few things that we've seen just on our first review of this, I think a big area of change and a theme that runs through the standard here is this idea of quality culture, which I have mixed feelings about because I think the principle of it is good.

The way that it's been included in the leadership responsibilities and in the management review as an idea there and in the awareness process.

okay fantastic thank you so then do organizations need to start making changes immediately or can they wait until the next audit

So I guess the big question is then, why launch a dedicated aerospace brand, obviously, instead of delivering this work under a centrist management?

Yeah, that's certainly a good question.

So we could have kept it under a cent.

I think that would have been perfectly fine.

But I think what that would give us is a general consultancy offering.

What we wanted to be really clear about is that the VALO and the team there, obviously Danny is heading up the team.

We've got other consultants that are very experienced in aerospace as well.

Why should they be looking at using a consultancy such as Velo that specializes in this? Why is it important?

So tell us a little bit sort of how you approached that first project, the first implementation of ISO 27001, and then also reflect on how that sort of changed today as well.

so i think people learn all the time anyway and we're still learning as a consultancy and we're still building that into our projects any learnings we get from our clients obviously every client is different back then so sort of 20 or so years ago we already had a good grounding in it and we had a technical perspective what we needed to get our head around was how management systems are put together and again that can be different from company to company I think in those days, paperwork was a lot heavier.

So there's a lot more documentation that you needed, a lot more mandatory documentation in the standards.

In recent years, ISO has kind of changed that a little bit.

And it's more about having documentation that's appropriate to your company.

as opposed to having something for the sake of having it, which is obviously a good step.

But in those days, it was very document heavy.

So what are we expecting of the future of ISO?