Temple Quality Management Systems

Temple joins West Midlands Business Festival for online event

Temple Quality Management Systems — 24/01/2025

West Midlands Business Festival will bring the local business community together for two-weeks of inspiration, innovation, learning, sharing, showcasing and networking.

Taking place from Monday 3 - Friday 14 March 2025, the festival will include an exciting programme of free events put on by business for business. Events will promote growth, collaboration and skills development.

West Midlands Business Festival is a brand new initiative by Business Growth West Midlands. It will showcase the region as a fantastic place to work, live and do business.

Event:
Achieving Success With Business Standards

10th March | 10am-11am GMT | Virtual Event
Presenters: Jaz Tanwar and Ian Hughes
Practical guidance and actionable strategies to help businesses to implement ISO standards.

Book your place

About the session:
Developed through consensus by industry stakeholders, regulatory bodies, professional associations, and standardisation organisations, Business Standards provide a common language and framework for organisations, regulators, and consumers.

Business standards help you to reduce costs, enhance performance and boost productivity. They help to deliver internal business improvements, cost savings in regulatory compliance and more efficient productivity. Certification to a standard proves that your product or service meets current national and international standards.

The only problem is that with over 100,000 of them - and more published every year - knowing which standard to implement can be a challenge.

To help you know where to start, join Temple for an online event. They will help guide you to find the right standards for your organisation, so you can establish a robust framework for success.

Attendees will benefit from expert-led sessions that demystify ISO implementation processes, including step-by-step approaches, case studies, and key pitfalls to avoid. You’ll attend interactive workshops, to apply what you learn in real-time.

At the end of the event, you’ll leave with a clear roadmap for starting your ISO journey. You'll feel empowered to improve efficiency, compliance, and overall business performance.

Report: UK manufacturing can benefit from AI

Temple Quality Management Systems — 10/01/2025

The Make UK and Autodesk report highlights growing investment in artificial intelligence (AI) among British manufacturers, with three-quarters planning to increase their investment.
There are, however, significant barriers to smaller firms fully leveraging AI's potential, resulting in uneven adoption.

Identifying areas where government policy and industry action could facilitate broader adoption of AI, Future Factories powered by AI explores the opportunities AI provides to the manufacturing sector. However, AI has yet to be fully integrated into core manufacturing processes, despite its benefits in energy optimisation, waste reduction, and resource efficiency.

As key benefits of AI, manufacturers cited increased efficiency (69%), increased productivity (61%), and automated routine tasks (46%). While large companies are twice as likely to implement AI as SMEs (71% vs. 28%), small companies are missing out on these advantages. Inequalities in access to digital infrastructure, technical skills, and awareness contribute to this disparity.

Nina Gryf, Digitalisation Lead at Make UK, commented: “AI and automation are driving dramatic change in speeding up manufacturing processes and elsewhere in companies. Their potential to drive economic growth and reshape industries is becoming clear. However, while the uptake of such technologies is increasing, the UK needs a step change in automation; otherwise, it risks missing out on vital transformative productivity gains.”

Additionally, the report highlights the UK's slow adoption of robotics. Among comparable nations like France and Italy, the UK ranks 24th in robotics use, with just 111 robots per 10,000 employees. Furthermore, 29% of manufacturers have no plans to explore robotics, while 16% already use it.

Knowledge and Skills Challenge

Many companies, particularly SMEs, aren't reaping the benefits of AI due to a lack of knowledge and skills, the report reveals. As a result of AI adoption, nearly a quarter of firms reported increased profits, and a third said they were able to take on more jobs, demonstrating the technology's transformational potential.

Srinath Jonnalagadda, VP of Industry Strategy for Design & Manufacturing at Autodesk, stressed the need for long-term commitment: “Taking advantage of new technologies isn’t a one-off investment and the silver bullet for change. It demands a shift in mindset and an iterative approach over time. A continued and concerted effort will be needed to achieve industry transformation and workforce with the skills and capacity required to take advantage of new technology. This will enable UK industry to emerge as a global leader in AI-driven innovation.”

Manufacturers, particularly small firms, need targeted support, according to the report. In addition to extending R&D tax relief to capital equipment investments, the Made Smarter programme should be expanded to cover support across the country. Peer-to-peer learning is also encouraged among industry leaders to address cultural and awareness gaps.

August 2024 was the date of the survey of 151 companies.

Download the report

Introducing the EU's new cyber security obligations for businesses

Temple Quality Management Systems — 13/02/2025

The Cyber Solidarity Act (Solidarity Act) has taken another step towards becoming a reality. It was early December when the European Parliament's Industry, Research and Energy Committee adopted its draft report on the act, and shortly afterward the representatives of the Member States reached a consensus on the text.

Through testing entities in crucial sectors to see how they can better prepare, setting up incident response services, and providing mutual assistance to states affected by cybersecurity incidents, the Solidarity Act focuses on ensuring EU readiness to deal with cybersecurity incidents.

In recent years, European legislation has greatly influenced the debate on cybersecurity. With its cybersecurity strategy, the EU has issued numerous new legal acts aimed at enhancing cybersecurity across the European Union. It can be difficult for companies to understand their compliance obligations in the complex web of new regulations, which may not be self-explanatory. As part of this article, we categorise the EU Commission's overall strategy, how the new laws relate to each other, and what is regulated in each.

1. How does the EU plan to achieve its goals?

In addition to physical threats, cyberspace is increasingly becoming a source of threats to companies and government organizations. In parallel, digital infrastructure and connectivity are becoming increasingly important in all aspects of life. Legislation focuses on both physical infrastructure protection (e.g. CER-Directive) and cyber threat protection. In December 2020, the European Commission presented its new cybersecurity strategy. Based on four basic principles, it aims to achieve a higher level of protection:

Prevent
Detect
Respond
Deter

There is a particular focus on increased cooperation and information exchange between the member states. It is common for more than one member state to be affected by cyber threats due to the fact that they cannot be stopped by national borders. As a result, centralized reporting systems and cross-sector security standards are being established in order to create a comprehensive picture of the situation. Risk-based thinking is incorporated into the strategy. Products, services, or activities with a higher level of risk are subject to more extensive and stringent obligations. Legal acts also apply both to their scope of application and to the specific legal acts themselves (for example, the NIS 2 Directive applies to organisations whose systemic relevance makes them particularly worthy of protection). Technical and organisational measures (such as a risk management system) are used in the strategy to address both the hardware and software security of products as well as the company's overall security.

2. Which legal acts are there?

These legal acts implement the Commission's strategy in detail:

NIS-2 (Directive EU 2022/2555): NIS-2 aims to increase the cyber resilience of critical infrastructure and entities classified as ‘important’ or ‘essential’ that operate in sectors that are particularly worthy of protection.
Cybersecurity Act (Regulation EU 2019/881): The Cybersecurity Act creates a standardised certification framework for ICT products and strengthens the European Union Agency for Cybersecurity (ENISA).
Cyber Resilience Act (Regulation EU 2024/2847): The Cyber Resilience Act establishes horizontal security regulations for products with digital elements (e.g. Internet of Things).
Cyber Solidarity Act (Regulation EU 2025/38): The Cyber Solidarity Act aims to improve cross-border defence against cyber-attacks by establishing warning, emergency and verification systems.
Digital Operational Resilience Act ‘DORA’ (Regulation 2022/2554): DORA is intended to increase resilience in the financial sector by imposing increased security requirements on financial entities and also their ICT service providers.

3. How is regulation implemented?

NIS-2: The directive entered into force in January 2023, but it needs to be transposed into national law before it becomes directly applicable. Many member states are still struggling with transposition, despite the deadline expiring on 17 October 2024.

It aims to ensure a high level of cybersecurity in sectors that are particularly important. The CER Directive (EU 2022/2557) aims to ensure the physical security of critical entities. The directive outlines cybersecurity measures (e.g. risk management systems), registration and reporting of security incidents, and supervisory measures (e.g. on-site inspections). Members also cooperate across the EU in reporting cyber threats and defending against them, as well as exchanging information. There has been a considerable expansion of addressees here. In the past, only critical infrastructure was covered by these obligations, but now companies in relevant sectors (energy, transport, banking, financial market infrastructures, health, drinking water, waste water, digital infrastructure, ICT service management, public administration, space) are also covered. Besides post/courier services, waste management, production, manufacturing, digital providers, and research, other critical sectors are also covered. A company's turnover and employee count are included in the criteria for classifying it as important or essential. In some instances, however, the provisions apply regardless of the size of the organization (e.g., providers of public electronic communication networks). Although national implementation of the directive has stalled, companies should already check if they fall within its scope and determine what security measures they must take to comply.

Cybersecurity Act:
Since 28 June 2021, the Regulation has been directly and fully applicable in all member states. By harmonizing the certification process for information and communication technology (ICT) products, services, and processes, the Cybersecurity Act strengthens cybersecurity in the Union. The levels of security are classified into 'low', 'medium', and 'high' according to different criteria. Assessment criteria may include unauthorised access to stored data, security through default settings, or documentation of data access. Additionally, ENISA's mandate has been strengthened with a permanent one. With regard to member states and Union bodies, it provides comprehensive coordination, support, and advisory services.

Cyber Resilience Act:
Regulations have been in force since 10 December 2024. As of 11 December 2027, the main obligations are directly applicable. The Cyber Resilience Act focuses primarily on product security on the horizontal level. The General Product Safety Regulation (EU 2023/988) includes specific provisions on cybersecurity in addition to the general provisions on product safety. Product manufacturers, importers, and retailers who sell digital products are subject to these obligations. A growing number of products (e.g. Internet of Things) embed software, creating security gaps. Embedded systems, software, and hardware are all covered. Plan, design, develop, maintain, and update (including updates) of a product must take into account security requirements along the entire value chain. A recall and reporting requirement is also in place. It follows a risk-based approach and imposes additional obligations on products that are classified as 'important' or 'critical'. For open source software (OSS) and certain products (e.g. medical devices), there are exceptions.

Cyber Solidarity Act:
On 15 January 2025, the regulation was published in the Official Gazette and will take effect on 4 February 2025. Cyber Solidarity Act aims to prevent and defend against cyber attacks across borders. This will be accomplished by creating EU-wide infrastructures for incident detection, response, and management. This is based on three systems:

European Cybersecurity Alert System: a Europe-wide network of voluntarily participating national and cross-border cyber hubs for the detection, analysis and data processing of cyber threats and the prevention of security incidents.
Cyber Emergency Mechanism: A system to reinforce the Union's resilience to cyber threats, in particular through readiness tests, measures to support incident response, assistance support and the establishment of a cybersecurity reserve.
European cybersecurity incident review mechanism: At the request of the Commission and with the agreement of the affected member state, ENISA can carry out a review and assessment of cyber threats, known exploitable vulnerabilities and containment measures in relation to a specific serious cybersecurity incident and prepare a report. This report may include recommendations for improving cyber defence.

DORA:
Since 16 January 2023, the Regulation has been directly applicable. For the financial sector, DORA establishes specific security regulations. Financial organizations are required to manage ICT risks, manage ICT incidents, conduct security testing, manage ICT third-party relationships (e.g. contracts) and share information. Financial companies also fall within the scope of the regulation if they provide ICT services. Supervisory authorities conduct special monitoring of critical ICT service providers. It is the responsibility of management bodies of companies to implement these obligations in this context.

DORA is a sector-specific law that has significant implications for ICT service providers, but it is not directly part of the general cybersecurity strategy. It should be noted, however, that in addition to the general cybersecurity legislation, further sector-specific regulations may also apply (for example, Implementing Regulation EU 2015/1998 for aviation security and Implementing Regulation EU 2022/1426 for fully automated vehicles).

Need some guidance?

Following the guidelines of ISO 27001, receiving training and working with an auditor such as Temple to ensure that the gaps are addressed, and your processes are sound is the best way to ensure that you are best prepared to help make you and your business secure.

Email Temple on enquiries@templeqms.com to arrange a chat about your training and ISO 27001 implementation for your business.

Navigating the Future of Health & Safety: Key Insights from RS Group’s 2025 EHS Report

Temple Quality Management Systems — 14/04/2025

At Temple QMS, we believe that continual improvement in environmental, health, and safety (EHS) performance is vital for creating safer, more sustainable workplaces.

That’s why we’re taking a closer look at RS Group’s latest industry report, Improving the Standard 2025, which offers a timely snapshot of the evolving health and safety landscape across the UK and Ireland.

Drawing on responses from 545 professionals working in EHS roles across a wide range of sectors – including manufacturing, energy, logistics, retail, and public services – the report reveals both progress and persisting challenges in how organisations are managing health, safety, and wellbeing in today’s complex operating environment.

A Challenging Outlook for EHS Confidence

One of the most striking findings is a noticeable dip in confidence levels among EHS professionals. Belief in the ability of teams to keep staff safe and perform their roles effectively has fallen to its lowest point in three years. Despite this, confidence in protecting end-users remains relatively strong, with 88% of respondents maintaining faith in their organisation’s ability to safeguard people – only a slight drop from 89% last year.

Confidence in selecting appropriate personal protective equipment (PPE) and preventing physical harm also saw a decline, with only 75% expressing assurance in these areas, compared to over 80% last year.

Mental Health: Still Falling Short

While mental wellbeing has become an increasingly prominent issue, the data shows it’s not being matched by action. Confidence in mental health provision has slipped to 53%, and only 73% of organisations reported having a mental health support strategy in place – both slightly down on the previous year’s figures. These figures suggest mental health is still playing catch-up compared to physical safety, something we pointed out in our Mental Health Temple Talks podcast.

The Maturity Gap in PPE Management

Interestingly, almost half of PPE users (48%) rated their organisation’s PPE maturity as ‘high’, whereas only 38% of EHS professionals shared this view. In fact, the number of professionals describing their PPE management maturity as ‘low’ rose from 7% to 11%. This gap underscores the need for better alignment between perception and operational reality.

Strategy Priorities & Compliance Measures

Accident prevention remains the top strategic priority (37%), followed by investment in systems (22%, up from 17%) and cultural change (13%, down from 16%). However, some key performance indicators (KPIs) are trending in the wrong direction. The proportion of organisations tracking near-miss incidents has dropped from 67% to 61%, suggesting an area for urgent review.

When it comes to compliance, training and development (69%) and workplace culture (65%) are viewed as the most impactful drivers. However, skill gaps within EHS teams are a growing concern, cited as a risk to compliance by over half of respondents – a figure that has been rising year-on-year.

Staff retention was also flagged as a crucial factor for improving compliance in the coming year, with 28% seeing it as a key lever, up from just 15% two years ago.

The Sustainability Dilemma

While sustainability continues to rank highly on the corporate agenda, cost pressures appear to be dampening enthusiasm. Only 60% of EHS professionals said they were willing to pay more for sustainable PPE this year – a steep fall from 78% in 2024.

That said, as Greg Sharp from RS points out, a higher upfront investment in quality PPE can lead to long-term cost savings, particularly when durability and lifecycle value are considered.

Gender Inclusivity in PPE: More Work Needed

The report also shines a light on gender-specific PPE issues. Despite increasing awareness, just 1% of respondents highlighted women-specific PPE as a major purchasing factor. Encouragingly though, over half reported improvements in both product range (54%) and suitability (49%) for women over the past year. Still, with 85% saying more needs to be done to ensure PPE is properly designed for women, it’s clear this remains a priority area for development.

A supplementary survey of 196 PPE users revealed that 11% had felt unsafe due to poorly fitting PPE, and nearly a third (30%) reported feeling uncomfortable. Alarmingly, 13% said they had to modify their PPE to make it wearable.

Final Reflections from Industry Leaders

Raj Patel, Managing Director of RS in the UK & Ireland, summarised the broader picture:

“EHS professionals are contending with more uncertainty than ever. While strides have been made, particularly around physical safety, mental health and skills development need urgent attention.”

At Temple QMS, we echo these sentiments. The findings of RS’s 2025 report reinforce the need for organisations to think holistically about EHS – balancing safety, sustainability, and wellbeing, while investing in training and upskilling to stay ahead of future risks.

To explore the full findings or download the infographic, visit the RS Health & Safety 2025 report page.

Beyond the Price Tag: Unpacking the True Cost of Quality (COQ)

Temple Quality Management Systems — 24/03/2025

In this episode, we’re tackling a crucial topic for businesses aiming to improve efficiency and profitability, the Cost of Quality (COQ).

Understanding the true cost of quality isn’t just about avoiding defects; it’s about balancing prevention, appraisal, and failure costs to drive long-term success.

And to help us break it all down, Bob Hughes is joined by two incredible experts in the field: Errol Givans, a seasoned leader in quality management, and David Davies, a specialist in operational excellence and continuous improvement.

L-R Bob Hughes, Errol Givans & David Davies

Together, we’ll explore how businesses can optimise quality investments, reduce waste, and ultimately enhance their bottom line. So stay tuned as we unpack the real cost of quality, right here on Temple Talks!"

Listen on these players:

Spotify: https://open.spotify.com/episode/6sp9yz4ofMqeAAau6A0n0c?si=d54e9ddb5d6940a5

YouTube: https://youtu.be/Vx-knRUCj3M

Amazon Music / Audible: https://www.amazon.in/Temple-Talks/dp/B0C13X29F4

BuzzSprout: https://www.buzzsprout.com/2171460/episodes/16848726-cost-of-quality-coq

Integrating climate change considerations into Internal Audits

Temple Quality Management Systems — 20/06/2025

In today’s evolving regulatory and corporate landscape, climate change is no longer a distant issue — it is a current and pressing concern. While most ISO Management System Standards do not yet mandate specific actions regarding climate change, organisations certified to ISO 14001 (Environmental Management) or ISO 50001 (Energy Management) should already be considering how their operations affect the climate. Proactively incorporating climate-related considerations into internal audit programmes is not only forward-thinking but could soon become essential.

At Temple QMS, we believe the role of the internal auditor is expanding. Auditors must be trained not only in compliance and process efficiency, but also in identifying environmental risks and opportunities. With many European customers and corporate groups already requesting suppliers to calculate greenhouse gas (GHG) emissions, this is an issue that will affect businesses across all sectors.

Understanding the Challenge

The carbon cycle is a natural process where carbon is exchanged between the earth’s atmosphere, oceans, and living organisms. However, human activity — such as the burning of fossil fuels and deforestation — is releasing carbon dioxide (CO₂) at a rate faster than natural systems can absorb. This imbalance is a key driver of climate change.

Rather than entering the political debate, we encourage businesses to focus on what they can control: reducing the release of greenhouse gases through thoughtful, practical steps. Internal audits provide a useful mechanism for identifying where emissions originate and how they can be mitigated.

Linking to ISO Management Standards

Although climate change is not yet a core clause in all ISO MSS, there are several relevant touchpoints. For example:

ISO 9001:2015 Clause 7.1.3 – Infrastructure
ISO 45001:2018 Clause 6.1.2.1 – Hazard Identification
Both standards mention infrastructure, which includes buildings, equipment, transport resources, and information and communication technology. Each of these areas presents opportunities to reduce emissions and improve sustainability.

A Climate-Focused View of Infrastructure

Let us briefly examine each category from a climate change perspective:

Buildings and Utilities

An internal audit could assess:

Air leaks around doors, windows, and dock plates.
The use of LED lighting and motion sensors in low-traffic areas.
Installation of solar-powered external lighting.
Utilisation of natural light indoors through innovative design.
Deployment of waste heat recovery systems.
Use of green roofing or natural insulation strategies.
Availability of green space that could contribute to carbon offsetting.
Maintenance of HVAC filters and seals to ensure energy efficiency.

Real-world examples include identifying unsealed wall penetrations from outdated equipment or recommending retrofitting for improved insulation.

Equipment and Software

Auditors should consider:

Variable speed drives (VSDs) and energy-efficient motors.
Regular maintenance, including the use of ultrasonic detectors to identify air or vacuum leaks.
The energy consumption of software and smart technologies.
Insulation of hot or chilled water pipes.
Opportunities for renewable energy (solar, wind, water).
Equipment sizing and avoiding over-specification, which leads to energy waste.
Thermal imaging as a tool to detect inefficiencies and overheating.

Transportation Resources

Transitioning from propane to electric forklifts.
Minimising unnecessary trips through logistical planning.
Conducting spaghetti diagram analyses to optimise workflow.
Maintaining internal transport vehicles to ensure efficiency.

Information and Communication Technology

Installation of programmable thermostats and smart controls.
Conducting energy audits focused on lighting and ICT systems.
Identifying “phantom energy” draw from idle electronics.
Managing operations during peak energy tariff periods to reduce demand.

Training Auditors to Address Climate Change

The traditional internal audit checklist is no longer sufficient. Climate-related insights require a deeper understanding of operational processes, emerging standards, and innovation.

ISO 56001:2024 (Innovation Management) provides a useful framework for encouraging a culture of improvement, particularly through the concepts of reduce, reuse, and recycle. Encouraging your internal auditors to understand innovation systems can support the identification of new opportunities to reduce carbon output.

Additionally, ISO 14068-1:2023, Climate Change Management – Transition to Net Zero, Part 1: Carbon Neutrality, provides further guidance. While not a certifiable MSS, this verification standard is increasingly being requested by customers, particularly in Europe.

We have already supported clients facing demands to align with ISO 14068, and while it is not yet a formal requirement, familiarity with its principles can position your organisation as a responsible and preferred supplier.

Preparing for the Future

ISO 9001 and ISO 14001 are both undergoing reviews, with updates anticipated in 2026. Climate change may become a more explicit component of these revisions. Preparing your internal audit team now ensures you will be ahead of the curve, rather than reacting under pressure later.

Final Thoughts

Addressing climate change through internal auditing is not about meeting a current requirement — it is about preparing your organisation for what lies ahead. As customer expectations shift and environmental concerns grow, businesses that take proactive steps will be better equipped to remain competitive, compliant, and credible.

At Temple QMS, we are committed to helping you integrate sustainability into your management systems. If you would like support in updating your internal auditor training or conducting a climate-focused audit, we are here to help.

Overconfidence in Cyber Resilience is Leaving Manufacturing Vulnerable, Report Warns

Temple Quality Management Systems — 12/03/2025

A new report has revealed that manufacturing sector leaders may be overestimating their cyber resilience, creating internal security blind spots.

Despite 76% of cyber risk owners believing their organisations are resilient, the study by Threat Detection & Response provider e2e-assure suggests otherwise.

The report found that 77% of manufacturing employees admitted to witnessing a colleague breach cybersecurity protocols. However, due to their confidence in existing defences, cyber risk owners are not prioritising cybersecurity training—only 24% of organisations currently offer such programs.

This overconfidence is particularly concerning given that 82% of cyber risk owners reported experiencing a cyber attack, an increase from 78% the previous year. The focus on external threats, such as ransomware attacks that can cause costly downtime and supply chain disruptions, may be overshadowing internal vulnerabilities.

Manufacturing firms often rely on legacy systems that do not seamlessly integrate with modern cybersecurity technologies, resulting in security gaps. Without adequate training, employees may not recognise or report suspicious activity—only 23% of employees currently report incidents to IT, often due to a lack of understanding of cybersecurity risks.

Another alarming finding is that just 6% of employees view cybersecurity as a collective responsibility, whereas 54% believe it falls solely under the IT team’s jurisdiction. This misplaced trust in IT teams managing all security concerns leads to disengagement, with only 36% of employees stating they are "very engaged" in cybersecurity training—despite 76% of cyber risk owners believing otherwise.

The study also highlights a reliance on outsourced Security Operations Centers (SOCs), with 44% of manufacturing firms utilising external providers. However, cyber attacks within the sector continue to rise, indicating that outsourced solutions alone are not enough.

Artificial intelligence (AI) presents another challenge. Manufacturing has the highest AI usage among all surveyed sectors, with 37% of employees using OpenAI tools at least weekly. Despite 80% of cyber risk owners expressing confidence in their organisation’s AI policies, 52% of employees admit they are unaware of what these policies entail. This disconnect between policy and awareness could severely impact cyber threat detection and response.

Rob Demain, Founder and CEO at e2e-assure, emphasised the need for comprehensive training: “With so many employees disengaged in cybersecurity despite frequent breaches of best practices, it’s crucial that cyber risk owners implement effective training programs. These should address AI risks, best practices for legacy systems, and foster a collective responsibility for cybersecurity.”

To enhance cybersecurity resilience, the report recommends four key actions:

Tailor training programs to actively engage employees.
Foster a culture of security awareness.
Leverage automation to minimise human error.
Ensure the right cybersecurity providers are in place.

The e2e-assure research aligns with findings from Omdia, which recently reported an increase in cyber attacks targeting the manufacturing sector. These reports underscore the urgent need for manufacturing organisations to take a holistic approach to cybersecurity, ensuring that internal risks are given as much attention as external threats.

Read the full report

Manufacturers in the UK can take several steps to prevent cybersecurity breaches and strengthen their resilience:

1. Strengthen Employee Awareness & Training

Implement regular cybersecurity training to educate employees on threats like phishing and social engineering.
Foster a culture of security awareness, emphasising that cybersecurity is a shared responsibility, not just the IT team's job.
Conduct simulated cyber attack exercises to test and improve response times.

2. Implement Strong Access Controls

Use multi-factor authentication (MFA) to protect sensitive systems.
Enforce role-based access controls (RBAC), ensuring employees only have access to necessary systems.
Regularly review and update user access permissions.

3. Secure Legacy Systems

Identify and patch vulnerabilities in older systems where possible.
Use network segmentation to isolate legacy systems from critical infrastructure.
Implement intrusion detection systems (IDS) to monitor abnormal activity.

4. Protect Against Ransomware & Malware

Regularly backup critical data and store copies securely offline.
Deploy endpoint detection and response (EDR) solutions to identify and neutralise threats.
Implement email filtering and anti-phishing tools to block malicious emails.

5. Monitor and Respond to Threats Proactively

Set up a Security Operations Center (SOC)—in-house or outsourced—to monitor and analyse threats.
Use AI-driven threat detection to identify unusual patterns before breaches occur.
Develop and regularly update an incident response plan to minimise downtime and damage.

6. Strengthen Supply Chain Cybersecurity

Conduct risk assessments for third-party vendors and partners.
Require cybersecurity compliance from suppliers, ensuring they meet UK security standards.
Monitor for vulnerabilities in Internet of Things (IoT) devices used in manufacturing processes.

7. Enforce AI & Data Security Policies

Clearly define and communicate AI usage policies to employees.
Restrict unauthorised AI and data-sharing applications within the workplace.
Regularly audit AI and automation tools for potential security gaps.

Contact Temple today about ISO 27001 Training and Certification in your business.

How to Identify and Manage Workplace Health and Safety Risks

Temple Quality Management Systems — 23/06/2025

At Temple QMS, we believe that a healthy and safe workplace is the foundation of a resilient, high-performing business. Effective occupational health and safety (OHS) management is not simply about compliance – it’s about protecting your most valuable asset: your people.

When employees experience injury, illness or stress, the consequences go far beyond lost time. Productivity suffers, morale declines, and workloads shift unpredictably. For many businesses, these disruptions quickly translate into reputational damage, legal exposure and financial strain.

That’s why proactive OHS risk management is essential – and why we’re here to help. Through expert consultancy and tailored training, Temple QMS supports organisations across all sectors in building robust safety cultures, implementing ISO 45001 compliant systems and driving continuous improvement.

Understanding the Nature of OHS Hazards

A hazard is any work-related situation, activity or condition that has the potential to cause harm. These are often overlooked until an incident occurs – but identifying and mitigating them early is the key to prevention.

Hazards can include:

Frayed electrical wiring
Unsafe handling of chemicals
Repetitive or high-stress tasks
Poorly managed workloads
Lack of appropriate facilities or equipment

Uncontrolled hazards lead to risk – and unmanaged risk leads to harm.

Common Health and Safety Risks

Workplace risks are wide-ranging and often interconnected. Some of the most prevalent include:

Mental ill-health: Burnout, stress and anxiety can severely impact employee engagement and performance.
Fatigue and overwork: Long hours and lack of rest lead to mistakes, injuries and chronic illness.
Communicable diseases: Infections like COVID-19 can spread rapidly, disrupting operations.
Environmental and structural issues: Poor ventilation, unsafe water or food handling, and exposure to radiation or chemicals create long-term health problems.
Workplace injuries: From slips and strains to serious accidents, unsafe conditions can have lasting consequences for individuals and teams.

Types of Workplace Hazards

Every organisation, regardless of size or industry, faces some combination of the following six hazard types:

Safety hazards: Machinery, heights, electricity and other physical risks require strict protocols.
Chemical hazards: Fumes, gases and flammable materials must be handled with appropriate PPE and controls.
Physical hazards: Noise, poor lighting, radiation and extreme temperatures demand regular monitoring.
Ergonomic hazards: Repetitive motions, poor posture and inadequate workstations can lead to musculoskeletal disorders.
Biological hazards: Mould, bacteria and bodily fluids pose health risks, especially in healthcare and food environments.
Psychosocial hazards: Bullying, harassment and stress can deeply affect staff wellbeing and workplace culture.

The Real Cost of Poor OHS

Beyond immediate health implications, poor OHS management carries substantial financial and operational costs:

Lost productivity and downtime
Increased recruitment, training and insurance expenses
Legal claims and administrative burdens
Erosion of trust, brand damage and reputational risk

At Temple QMS, we work with businesses to minimise these risks through proven systems, helping them to create safe, efficient, and resilient environments.

How to Reduce OHS Risks: A Practical Approach

1. Identify Workplace Hazards

Start with a comprehensive review. Conduct inspections, analyse incident data, and speak with your team. Consider all work locations – including remote or home-based environments.

2. Assess and Control Risks

Evaluate the likelihood and severity of harm, then introduce appropriate control measures. This may include physical adjustments, training, revised processes, or cultural interventions to address issues like stress or disengagement.

3. Review and Adapt Controls

Risk is not static. Regularly review controls, especially when introducing new services, expanding your team, or responding to external changes such as economic shifts or new legislation.

4. Keep Detailed Records

Documentation strengthens legal compliance and demonstrates accountability. At Temple QMS, we guide clients in setting up effective record-keeping systems to track assessments, inspections, corrective actions and outcomes.

5. Monitor, Measure and Improve

Track OHS performance over time. Establish clear KPIs and conduct periodic management reviews to ensure controls remain effective and relevant. This allows you to stay ahead of emerging risks.

Strengthening Risk Management Through ISO Standards

International standards such as ISO 45001 and ISO 45003 offer a framework for building and maintaining an effective OHS management system. These standards emphasise:

Context analysis and stakeholder engagement
Leadership and accountability
Hazard identification and employee consultation
Competency and training
Performance monitoring and continual improvement

At Temple QMS, we provide expert ISO 45001 implementation support, internal audits, and training programmes to embed health and safety into your organisational DNA.

Tailored Solutions for Organisations of All Sizes

Large Enterprises

Corporations are under increasing scrutiny to deliver on governance, transparency and sustainability. A proactive OHS strategy helps to:

Improve brand reputation and investor confidence
Strengthen corporate social responsibility (CSR) initiatives
Build stakeholder trust and protect long-term interests

Small and Medium-Sized Businesses

With smaller teams, even one incident can have a major impact. Effective OHS management helps SMEs to:

Secure contracts by meeting client safety requirements
Minimise disruption from staff absences
Motivate teams and attract skilled workers
Maintain affordable insurance coverage

Temple QMS understands the different pressures faced by large and small organisations – and offers scalable, practical solutions to meet your needs.

Your Blueprint for Sustainable Success

Embedding good OHS practice is more than a compliance exercise – it’s a strategic advantage. By fostering a proactive safety culture, you reduce operational risks, improve workforce morale and demonstrate responsible leadership.

Let Temple QMS help you take the next step in your health and safety journey. Through consultancy, training and systems support, we empower organisations to protect their people, exceed industry standards and build a future-ready business.

Contact us today to learn how we can support your organisation in strengthening its OHS performance – and building a workplace where everyone thrives.

Spring Budget 2025: Implications for UK Manufacturing and Defence

Temple Quality Management Systems — 26/03/2025

As businesses prepare for potential supply chain disruptions amid an escalating global trade war, investment in new technology has emerged as a top priority for the UK’s senior executives ahead of Rachel Reeves’ Spring Budget today.

Research indicates that 70% of business leaders are advocating for increased investment in technologies such as artificial intelligence, smart warehousing, and data analytics. These advancements are seen as crucial for modernising supply chains and maintaining competitiveness in the face of growing global trade tensions.

At the same time, 62% of UK C-suite executives are calling for greater investment in workforce development, with a particular emphasis on long-term skills training and apprenticeship schemes. This highlights ongoing challenges in the manufacturing sector, where an ageing workforce and difficulties in attracting young talent remain key concerns.

Presenting the Spring Budget, the Chancellor remarked: “Our task is to secure Britain’s future in a world that is changing before our eyes. At the same time, the global economy has become more uncertain, bringing insecurity at home, as trading patterns become more unstable and borrowing costs rise for many major economies.

“In the autumn, I set out our new fiscal rules that would guide this government. These fiscal rules are non-negotiable. They are the embodiment of this government’s unwavering commitment to bring stability to our economy and to ensure security for working people.”

With geopolitical uncertainty dominating the headlines, it was no surprise that defence played a central role in this spring statement. Reeves stated: “Because we are living in an uncertain world, we will increase defence spending to 2.5% of GDP, reducing overseas aid to 0.3% of gross national income in order to fund our more capital intensive defence commitments.

“Earlier this month, the Organisation for Economic Co-operation and Development (OECD) downgraded this year’s growth forecast for every G7 economy, including the UK and the Office for Budget Responsibility (OBR) has revised our growth forecast for 2025 from 2% in the autumn to 1% today. I am not satisfied with these numbers and that is why we are serious about taking the action needed to grow our economy.

“A changing world presents challenges, but it also presents new opportunities for new jobs and new contracts in our world-class defence industrial centres, from Belfast to Deeside, and from Plymouth to Rosyth.

“In February, the Prime Minister set out our government’s commitment to increase spending on defence to 2.5% of GDP from April 2027, the biggest sustained increase in defence spending since the end of the Cold War, with an ambition to spend 3% of GDP on defence in the next parliament. That was the right decision in a more insecure world.

“But we have to move quickly in this changing world, and that starts with investment. So today, I can confirm that I will provide an additional £2.2bn for the Ministry of Defence in the next financial year, a further down payment on our plans to deliver 2.5% of GDP by 2027.

“This additional investment is not just about increasing our national security, but increasing our economic security too. As defence spending rises, I want the whole country to feel its benefits, so I will set out the immediate steps that we are taking to boost Britain’s defence industry and to make the UK a defence industrial superpower.

“We will spend a minimum of 10% of the Ministry of Defence’s equipment budget on new novel technologies, including drones and AI-enabled technology. This will drive forward advanced manufacturing production in places like Glasgow, Derby and Newport, creating demand for highly skilled engineers and scientists and delivering new business opportunities for UK tech firms and start-ups.

“We will establish a protected budget of £400m within the Ministry of Defence, a budget that will rise over time for UK defence innovation with a clear mandate to bring innovative technology to the front line at speed.

“And we will reform our broken defence procurement system, making it quicker, more agile and streamlined, and giving small businesses across the UK better access to Ministry of Defence contracts, something welcomed by the Federation of Small Businesses.”

Cyber Governance Code of Practice

Temple Quality Management Systems — 08/04/2025

Effective management of cyber risks is critical to the operation of modern businesses.

What is the Cyber Governance Code of Practice?

The Cyber Governance Code of Practice (the Code) has been created to support boards and directors in governing cyber security risks. The Code sets out the most critical governance actions that directors are responsible for.

The Code forms part of the government’s free package of support on cyber governance and should be the first point of reference for board members.

It is underpinned by Cyber Governance Training, which helps boards and directors to strengthen their understanding of how to govern cyber security risks, and the Cyber Security Toolkit for Boards, which supports boards and directors in implementing the actions set out in the Code.

This Cyber Governance Code of Practice shows how company boards and directors can build resilience to a wide range of cyber risks across their organisation.

The Code, which has been co-designed with technical experts from the National Cyber Security Centre (NCSC) and a range of governance experts across industry, focuses on the actions senior leaders should take to govern cyber risks effectively within their organisation.

The Code forms part of the government’s free package of support on cyber governance and should be the first point of reference for board members. It is underpinned by Cyber Governance Training, which helps boards and directors to strengthen their understanding of how to govern cyber security risks, and the Cyber Security Toolkit for Boards, which supports boards and directors in implementing the actions set out in the Code.

There are also documents showing how the Code maps to cyber standards, such as the NCSC’s Cyber Assessment Framework (CAF).

A one-page summary of the Cyber Governance Code of Practice has also been provided to offer a concise view of the Code.

One page summary

Code of practice

How do standards add value to your organisation?

Temple Quality Management Systems — 20/02/2025

A standard is an agreed-upon method of doing something, developed by experts and individuals with experience or expertise in a given field, such as manufacturers, sellers, buyers, customers, trade associations, users, or regulators.

By providing you with the tools and knowledge you need to follow best practices for your processes, products, and services, standards can help your business save time, cut costs, and become more competitive. Industry bodies, research and testing organisations, local and central government officials, as well as consumers and standards users, collaborate to develop standards.

Currently, there are over 60,000 standards in use, and each one is tailored to a particular industry, product, or business. Using this FAQ, you will gain a better understanding of standards, and how your organisation can benefit from adopting one.

As a result of standards, you can:
• Be eligible to bid on larger projects with greater profit margins
• Improve productivity by learning more efficient methods
• Establish your reputation as a "gold standard"
• Provide consistency and reliability to clients and customers
• Improve your goods and services by following best practices
• Engage with the standard to offer training and development opportunities for employees
• Make informed decisions, guided by sector knowledge, to become more innovative

Why is it beneficial for my business to have standards?

The purpose of standards is to guide a best practice approach, whether it's about cleaning lab equipment or stress-testing machinery.

You'll find ways to improve how you do things if you look closely at how you do them. This guide outlines some of the many benefits standards can offer, but there are many others as well:

• Efficiencies and cost savings
• Statutory compliance
• A better risk management system
• High-quality output that is consistent
• A safer and healthier workplace
• Reputation enhancement
• Enhanced competitiveness
• A higher level of productivity and efficiency
• Staff retention is easier
• The opportunity to be creative will be increased
• The ability to maintain business continuity and agility is enhanced.

Before you implement a whole standard, you can start enjoying the benefits of standards by adopting just a few (or even one!) recommendations. In order to remain relevant and up-to-date, standards are constantly evolving.

Does my industry have any relevant standards?

There are many industries and topics covered by standards, which include both specific processes and more general approaches. It is likely that your business is subject to hundreds of standards. There could be standards that relate specifically to goods and services you provide (e.g. improving product quality), to the way you do business (e.g. information security standards for keeping data secure), or to your goals (e.g. reducing waste and saving energy through sustainability standards).

What is the average time it takes for a standard to be adopted?

It depends on the size of your business, the complexity of the standard, and whether you are implementing the standard to gain certification. Implementing a standard can be sped up by dedicating more time and resources.

Do I need standards in my business?

Are there any areas in your business where you could improve? By following protocols, maybe you can improve the efficiency of your production line or your customer service. Temple is always available to assist your business with any challenges it may face.

Does my business have to be completely restructured?

The majority of standards users find that applying the knowledge gained from the standard to the wider organisation is hugely beneficial. You don't have to change how you do things.

It is about improving your existing processes and bringing your operations in line with best practices when you adopt a standard. Examine how you do things carefully and assess - honestly - how well they work for you.

A standard can be adopted in various ways; you can implement parts of it and see benefits in certain areas, or you can implement lots of smaller changes with incremental benefits. There will be a change, but it will be a positive change.

Standard purchases are expensive, right?

There is a difference in cost between each standard. When choosing a standard, make sure it meets your needs before purchasing. The benefits of standards include improved processes, greater efficiency at every level, and time savings.

Standards give you access to expert knowledge and guidance at a fraction of the cost of external consultants.

Is it necessary to involve many people within my business when implementing standards

Engaging all members of your team in the adoption process will increase buy-in and enthusiasm, making implementation easier through a collaborative approach.

Establishing working groups, defining responsibilities, and involving staff in the adoption process provides employees with the opportunity to gain valuable skills, as well as simplifying implementation.

Am I required to get accredited?

It's not necessary if you don't want to. Many businesses adopt some of the best practices outlined in the standard instead of pursuing certification.

Businesses seek certification to demonstrate their expertise and commitment to health and safety, sustainability, and environmental protection, as well as training and quality. It is also important to remember that a certification is a real advantage when it comes to working with new clients, and tendering for projects.

When I become accredited, what happens?

It may seem as if certification is the end of a standard's benefits for a business, but it is not. Because standards are constantly evolving, their benefits are always increasing, so organisations benefit long after certification is complete.

Is your supplier network putting you at risk?

Temple Quality Management Systems — 26/06/2025

When thinking about cybersecurity, it’s easy to focus solely on your internal systems and policies. But what if the real danger lies beyond your business? For many organisations, the greatest vulnerability isn’t in-house, it’s within their network of suppliers.

In this post, we’ll explore why third-party risks are so critical, how they can affect your operations, and what you can do to build a more resilient supply chain.

One weak link can break the chain

Recent incidents across various sectors have made it clear: your security is only as strong as the companies you rely on. Whether it’s an IT provider, logistics partner or data processor, a breach at any point in your supply chain can have far-reaching consequences for your business.

And it doesn’t always require sophisticated hacking techniques. Social engineering – where attackers manipulate individuals into giving up access – continues to be a favourite tactic. These attacks don’t just target technology; they exploit human behaviour, and they’re particularly effective when aimed at suppliers who have privileged access to your systems.

The hidden impact of a third-party breach

A supplier-related security breach can hit your organisation hard. It may lead to delays in operations, exposure of sensitive customer information, loss of revenue, and significant reputational damage. Worse still, regaining customer trust after such an incident can be a long and uncertain road.

Modern businesses operate in highly connected ecosystems. A disruption at one node can ripple through your entire operation, affecting everything from stock management and service delivery to customer engagement and data protection.

Understanding and managing third-party risk

The reality is simple: even if your business has robust security controls, those efforts may be undermined if your suppliers don’t follow similar standards. Criminals often target smaller, less-secure partners in the hope of gaining access to larger targets indirectly.

So what can you do? It starts with visibility and ends with accountability.

1. Map your supplier landscape

Begin by identifying every organisation that supports your operations – not just your direct vendors, but also their subcontractors if possible. Understand who has access to your systems or data and what kind of access they have.

From there, prioritise your highest-risk relationships. Focus on partners who handle personal information, manage business-critical services, or interact with confidential data. These relationships need closer oversight and routine risk assessments.

2. Define your expectations

Clear, written expectations are essential. What are your minimum requirements for information security? How should suppliers handle your data? What actions must they take if there’s a breach?

These expectations should be reflected in contracts, service agreements, and onboarding documentation. Everyone in your supply chain should know where the bar is – and what happens if it isn’t met.

Having a structured security framework like ISO 27001 helps formalise these standards and ensures consistency across your supplier base.

3. Verify, don’t assume

Many organisations claim to follow best practices, but good intentions aren’t enough. You need to see evidence.

Request copies of information security policies, training records, and audit results. Ask how often suppliers review their controls. And if they claim to follow a recognised standard, check their certification status.

Certification to ISO 27001 is a strong sign that a supplier takes security seriously. It means they’ve been externally assessed and have a clear, structured approach to managing risks.

4. Keep security under constant review

Cyber threats are always changing, and your risk management approach must keep pace.

Review your supplier arrangements regularly. Update contracts, tighten controls after incidents, and share improvements across your network. A culture of continual improvement is essential for staying ahead of emerging risks.

With ISO 27001, regular reviews and audits are built into the process. This means your organisation – and your suppliers – are always aligned with current best practices.

Supply chain security is a shared responsibility

Protecting your organisation doesn’t stop at your front door. Every third party you work with represents an extension of your business – and of your risk profile. If even one supplier is exposed, the ripple effects can be damaging and long-lasting.

By taking the time to understand your supplier relationships, setting out clear security expectations, verifying compliance, and committing to ongoing improvement, you can reduce the risk of becoming the next headline.

Why ISO 27001 matters

ISO 27001 is the internationally recognised standard for managing information security. It helps organisations of all sizes identify, evaluate, and control the risks that could impact their data and systems.

Certification demonstrates your commitment to safeguarding information, builds trust with clients and suppliers, and provides a competitive edge in industries where data security is non-negotiable.

If you’re looking to strengthen your cybersecurity posture or ensure your supply chain is secure, adopting ISO 27001 is an excellent first step.

Ready to take control of your supply chain risks?

At Temple QMS, we specialise in helping businesses implement and maintain ISO 27001 certification and training. Whether you’re just starting your journey or want to assess your current framework, our team is here to guide you.

Let’s make your business more secure – together. Contact us today to get started.

Identifying OHS hazards and managing risks

Temple Quality Management Systems — 16/05/2025

In today’s competitive landscape, businesses can’t afford to overlook the health, safety and wellbeing of their people. Accidents, illness and psychological stress aren’t just personal issues – they have the power to disrupt operations, damage your reputation and cost your organisation dearly.

That’s why implementing a certified Occupational Health and Safety Management System (OHSMS), such as ISO 45001, isn’t just a legal or ethical obligation – it’s a strategic move for future-focused businesses.

The Hidden Cost of Workplace Risks

Whether you’re running a manufacturing site, managing field-based teams, or leading a desk-bound office, workplace hazards exist. If left unchecked, they can lead to:

Costly downtime and operational disruption
Staff shortages due to illness or injury
Low morale and high staff turnover
Rising insurance premiums and legal liabilities
Damaged reputation with clients and investors

From mental burnout to preventable injuries, the impact of poor health and safety management goes far beyond physical harm. It threatens your most valuable asset – your people – and undermines long-term business resilience.

Identifying Hazards, Reducing Risk

ISO 45001 empowers organisations to take control of occupational health and safety (OHS) risks by establishing a structured, evidence-based framework. This enables you to:

Systematically identify hazards across all roles and locations – from machinery and manual handling to stress and fatigue.
Perform detailed risk assessments that consider both immediate dangers and long-term health concerns.
Introduce practical controls and procedures to prevent incidents before they happen.
Involve employees in shaping safer, more supportive working environments.

Critically, ISO 45001 helps you go beyond minimum compliance to build a proactive culture where risk awareness and safety are embedded into everyday thinking.

ISO 45001: More Than Just a Tick Box

At Temple QMS, we help businesses not only achieve ISO 45001 accreditation and training, but also harness its full value as a tool for growth, performance and resilience.

Here’s how your organisation benefits:

✅ For Large Enterprises:

Meet ESG goals and CSR commitments
Strengthen investor confidence and public trust
Protect brand reputation across global operations
Integrate health and safety into broader business strategy

✅ For SMEs:

Win contracts with clients requiring certified suppliers
Reduce operational risk and unplanned absences
Improve staff retention and engagement
Access more competitive insurance rates

In short, ISO 45001 isn’t just about preventing harm – it’s about giving your business the stability it needs to grow sustainably.

Training and Consultancy Tailored to You

Implementing ISO 45001 can feel daunting – but it doesn’t have to be. Temple QMS offers expert-led support every step of the way, whether you’re starting from scratch or looking to improve an existing system.

We offer:

ISO 45001 Consultancy – Practical, hands-on support to design, implement and maintain a management system aligned to your goals.
Training Courses – From awareness sessions to internal auditor qualifications, we empower your team to own the process and maintain performance.
Gap Assessments and Audits – Honest, thorough evaluations to help you improve continuously and stay compliant.

Build a Resilient, Safer Future

A safe and healthy workplace isn’t a cost – it’s a competitive advantage. ISO 45001 helps you turn reactive firefighting into proactive leadership. By embedding good OHS practices into your core operations, you’ll reduce incidents, improve morale and create an organisation people are proud to work for.

Protect your people. Futureproof your business.
Partner with Temple QMS to unlock the benefits of ISO 45001 today.

£40m funding available for automotive technology businesses

Temple Quality Management Systems — 21/01/2025

UK-registered businesses involved in late-stage, collaborative research and development (CR&D) of automotive technology and processes can now apply for a share of up to £40m government funding matched by industry.

The latest competition facilitated by the Advanced Propulsion Centre UK (APC) and delivered in partnership with Innovate UK, part of UK Research and Innovation, and on behalf of the Department for Business and Trade, will provide funding to support CR&D projects that design, develop, and manufacture zero-emission automotive technology.

Eligible projects will include those looking to deliver net-zero, on-vehicle technologies for on or off-road applications, including two-wheelers, and accelerate the transition of the UK automotive supply chain. The competition is open to UK-registered businesses of any size running late-stage CR&D projects that meet the following criteria:

Working consortium including at least one SME company
Project duration of between 18-36 months with a clear route to market at the end of the project
Helping to build UK capability in emerging net-zero propulsion technologies
Reducing CO2 levels
Utilising digital tools and techniques
Creating and/or safeguarding UK jobs
Helping to anchor long-term capability in UK research and development

Projects will need to advance technologies in one or more of the following areas:

Energy storage, batteries, their components, management and integration systems
Fuel cell and associated balance of plant
Electric machines
Power electronics
On-road internal combustion which aims to achieve zero harmful tailpipe emissions utilising non-fossil fuels.
Off-road internal combustion that supports a transition to zero emissions utilising non-fossil fuels.
Hydrogen storage and management systems
Design for circular economy, including the disassembly, recovery, and reuse of materials used in the project technologies
Digitalisation for vehicle development and design

Individual projects can claim up to 50% of their eligible project costs in government match funding of between £2.5m and £20m (any award is subject to Ministerial and His Majesty’s Treasury approval).

Successful projects will benefit from funding, collaboration opportunities and expertise to bring their new technology to market, helping to advance the UK’s journey to a zero-emission automotive industry, strengthen its global impact and anchor added value across its supply chain.

Key competition dates:

Stage 1

14 January 2025 – Competition opens
15 January 2025 – Applicant Q&A event
14 March 2025, 11:00 GMT – Application deadline

Further competition details are available on the APC website.

Interested applicants are encouraged to contact the APC’s Business Development Team at info@apcuk.co.uk to discuss their project’s eligibility and gain advice on how to submit the strongest application possible.

Achieving the status of Chartered Quality Professional and CQI Member

Temple Quality Management Systems — 27/02/2025

Congratulations are extended to Josh Phillips CQP MCQI who has just become a Chartered Quality Professional.

Josh is now a member of the CQI, considered the 'gold standard' of professionalism.

To become a Chartered Quality Professional, Josh had to demonstrate five key competencies. These competencies were assessed under the CQI Competency Framework to demonstrate the abilities and behaviour required for governance, assurance and improvement.

Context - to ensure effective governance, assurance and improvement via domain and industry specific knowledge.

Governance - to ensure organisational requirements are reflected in frameworks, policies, processes and plans.

Improvement - to create a culture of evaluation

Leadership - to maximise influence and develop a culture of evaluation and improvement.

Assurance - to build a culture of assurance

About the CQI

After the end of the First World War, 500 British weapons inspectors from the Inspection Department of the Ministry of Munitions formed the CQI, the only body that offers Chartered Quality Professional status. They have grown to include 20,000 quality professionals worldwide since their remit was expanded in 1922 to promote efficiency and commerce.

Only Chartered Quality Professionals can act as true business partners, positively impacting the financial bottom line, eliminating unnecessary costs and waste.

This grade is for experienced people whose main focus is on quality, including consultants. Members at this grade can use the post-nominals 'CQP MCQI'. At this level, CQI members make a profound and positive contribution to organisations.

As a Chartered Quality Professional, Josh works for Olympus Global in Tipton, West Midlands. This opportunity was not only a recognition opportunity within the industry, but also for personal growth.

Josh Phillips told Temple:
"The first time I came into contact with Temple QMS and Bob Hughes was when I worked for my former family business, G.E. Starr in Wolverhampton. They assisted with the transition from ISO/TS16949 to IATF16949.

It was at this time that I was very much in my infancy in quality. However, Bob personally allowed me to shadow him, which greatly enhanced my knowledge of quality principles and techniques, particularly auditing. I have completed a variety of quality related courses through Temple over the years and have never found a fault with their service."

Bob Hughes, Managing Director from Temple QMS said:
"Quality in an organisation is everyone's responsibility, but a quality professional like Josh can provide the necessary knowledge, tools and guidance to assist staff in pursuing excellence. The Temple team and I congratulate him on his accomplishment. He'll be able to make such a a positive contribution to his organisation."

ISO 9001:2026 – Will Staff Need Additional Training?

Temple Quality Management Systems — 15/04/2025

With a new version of ISO 9001 on the horizon, questions are already swirling about what the 2026 update might mean for certified organisations, particularly when it comes to training and competence.

Will employees need to attend more courses? Will auditors be asking to see training certificates? Or will this revision simply call for a closer look at internal systems, with minimal disruption?

Let’s explore what businesses can expect and how to prepare.

A Brief Look Back

The ISO 9001 standard has evolved steadily over the decades, with major revisions roughly every 15 years:

1987 – First edition
1994 – Minor update
2000 – Major revision
2008 – Minor revision
2015 – Major revision
2026 – Next expected update

The committee responsible for ISO 9001, ISO/TC 176, began preparations for a new revision after concluding that the 2015 version no longer fully addressed today’s operational challenges. Originally slated for 2025, the revision is now expected to be released in 2026.

So, Will Training Be Required?

The short answer? It depends.

If past updates are anything to go by, changes to the ISO 9001 standard typically vary in scope—from minor clarifications to full structural overhauls. Whether training is necessary will largely depend on the extent of those changes and how they affect your organisation's quality management system (QMS).

For example, a recent amendment to Annex SL (the common structure underpinning ISO standards) introduced the concept of climate change as a context consideration. While this didn’t trigger formal training requirements, it did necessitate internal discussion and review.

Training isn’t always the answer—and it’s not always enough.

Managing the Transition: A Step-by-Step Approach

Regardless of how substantial the revision turns out to be, certified organisations will need to demonstrate that they have understood and implemented the necessary updates. Here's a structured approach to doing just that:

1. Stay Informed

How will you know the standard has changed? Many organisations rely on subscriptions to standards update services (such as Nimonik or GlobalSpec) or follow updates on LinkedIn or ISO’s official channels. Clause 7.5.3.2 of ISO 9001 supports the need to control external documents like standards.

2. Review the Changes

ISO 9001 clause 9.3 (Management Review) specifically calls for attention to changes in external and internal issues. Any revision to the standard will qualify. Start by assessing the impact on your current QMS.

3. Plan the Transition

Clause 6 of ISO 9001 highlights the importance of planning for change. Assign responsibilities, set timelines, and identify resources needed to adapt to the new version.

4. Implement the Updates

This stage might touch on several areas, including:

Resources (clause 7.1)
Competence and awareness (clauses 7.2, 7.3)
Communication (7.4)
Documented information (7.5)
Control of changes (8.5.6)

5. Conduct Internal Audits

Clause 9.2.2 requires internal audits to consider any changes that affect the QMS. These audits help verify that the updates are not only in place but also effective.

6. Management Review

Final step: ensure that leadership reviews the effectiveness of the transition. Confirm that the new standard’s requirements have been cascaded properly across the business.

Competency vs Training

It’s important to distinguish competence from training. ISO 9000 (the normative reference for ISO 9001) defines competence as “the ability to apply knowledge and skills to achieve intended results.” In other words, training is just one route to competency.

Your internal auditors, for example, may not need to attend another classroom session if the changes are minimal. However, if the update introduces entirely new concepts or methodologies, you might need to develop capabilities in-house or seek expert support.

If practical application or deeper behavioural insights are needed—for instance, in people assessments or sustainability integration—then training or external consultancy might be justified.

Creating a Competency Plan

Using frameworks like Bloom’s Taxonomy can help map out what your staff need to know and do:

Do they need to remember and understand the changes?
Should they be able to apply new processes?
Are they expected to create new systems or strategies?

Once outcomes are defined, the development path becomes clearer. In many cases, discussion groups, self-study, or coaching can be just as effective as formal training.

Timing the Transition

When ISO 9001:2026 is published, certified organisations will be given a transition period to adopt the new version—likely around 18 months, based on past experience. This allows two audit cycles to update your QMS and prove compliance.

In that time, internal audits, reviews, and any necessary training should be completed. Avoid leaving it to the last minute—early planning reduces risk and builds confidence.

Final Thoughts

Will the 2026 revision require more training? Possibly. But it’s not a given. What’s more important is a structured response: stay alert, review the changes, evaluate impacts, and ensure your people remain competent to deliver quality.

Training is a tool, not a checkbox. Use it wisely.

For details on Temple QMS training and consultancy services on ISO 9001. Go here:
Training - https://templeqms.com/iso-9001
Consultancy - https://templeqms.com/iso-9001-certification

One million and counting as JCB marks major Backhoe milestone

Temple Quality Management Systems — 31/01/2025

JCB has celebrated a major machine milestone with the production of its one millionth Backhoe Loader.

The first JCB Backhoe rolled off the production line in Rocester, Staffordshire in 1953. Called the Mark One, it brought the new wonder of hydraulic power to construction equipment for the first time.

In the first full year of production in 1954 just 35 of the machines were built and it took more than 20 years for the first 50,000 to be made. It took 59 years for the first half million JCB Backhoes to be manufactured – but less than 13 years for the next half million to be produced, culminating in today’s celebrations.

JCB now manufactures Backhoe Loaders in the UK, India, Brazil and it remains one of the most versatile and productive machines in the world. Despite the maturity of the versatile Backhoe Loader, it is still one of the biggest selling pieces of construction machinery and it remains the world’s 4th most popular machine in the construction equipment sales league table.

Today hundreds of Backhoe Boader employees lined the road outside JCB’s World HQ, joining company Chairman Anthony Bamford to watch a cavalcade of 16 Backhoes from down the ages. These spanned a 1954 Mark I through to a 2025 3CX model. Also joining in the celebrations today was retired JCB employee Ken Harrison, aged 100, who joined JCB as a welder in 1952 when only 29 people worked on the shop floor. Ken, one of the last known survivors of the production team that built the first JCB backhoes, retired 36 years later in 1988.

“I am the only person in the business now who can remember the early days when we first started to make backhoes in what was a former cheese factory in Rocester. Looking back at that time, I could never have imagined that we would make one million of these diggers after such humble beginnings.”

Lord Bamford | JCB Chairman

"Looking back is a fun thing to do but it’s always been JCB’s way to look forward and I’m looking forward to the production of the next one million Backhoes"

JCB has always invested heavily in its Backhoe Loader range and an early catalyst for growth was in 1980 which saw the £24 million launch of the technologically advanced 3CX. Customers then went on to reap the fuel saving benefits of the launch of JCB Backhoes powered by the JCB Dieselmax, a development which saves up to 11% in fuel costs. Today’s 3CX Pro is the fastest Backhoe Loader in the world, capable of speeds up to 50kph, reducing travel time between sites.

As well as Backhoes, JCB also manufactures Loadall telescopic handers, tracked and wheeled excavators, wheeled loading shovels, mini and micro excavators, skid steer loaders, track loaders, compaction equipment, rough terrain forklifts and Fastrac tractors.

JCB Backhoes are manufactured in the UK, India and Brazil and the company sells the product in 120 different countries. The business unit which manufactures the machines has previously won six Queen’s Awards.

Royalty, Prime Ministers, politicians and TV stars have all been photographed in the cab of JCB Backhoes over the years. The JCB Backhoe was even the subject of a song which made the top of the UK charts. And it was a JCB Backhoe which robbers used in a failed attempt to steal £350 million worth of diamonds from the Millennium Dome in 2000.

The one millionth JCB Backhoe to be produced was a 4CX model, which has been decorated in graffiti art by London-based artist and illustrator Dave Smith, and presented to Lord Bamford at the celebrations.

Find out about Temple’s work with JCB here after passing Practitioner Qualifications with Temple QMS.

Building business excellence with ISO 9001 quality objectives

Temple Quality Management Systems — 13/05/2025

At Temple QMS, we don’t just help businesses meet ISO 9001 standards, we guide them to master them.

Setting effective quality objectives isn’t about ticking a box. It’s about driving performance, aligning teams, and embedding continuous improvement into your business DNA.

In ISO 9001, quality objectives serve as the operational backbone of your Quality Management System (QMS). They are a strategic tool, one that, when properly defined, transforms compliance into competitive advantage.

Aligning Quality Objectives with Business Strategy

Too often, businesses fall into the trap of setting hollow or generic quality objectives. Targets like “reduce defects” or “improve quality” lack the clarity and alignment ISO 9001 demands. At Temple QMS, we work with you to ensure your objectives go deeper—directly linking them to your organisation’s broader goals.

For example, instead of vaguely aiming to “cut costs,” a strong objective might be: “Reduce customer return rates due to packaging defects by 30% across all SKUs by Q4 FY25.”

This kind of objective isn’t just clear, it highlights a strategic priority, provides a measurable outcome, and defines a deadline. When tied to the right KPIs and processes, it becomes a driver of transformation.

Applying the SMART Framework – The Temple Way

We train our clients to apply the SMART framework rigorously. Here's how we do it:

Specific – Goals must be clearly defined and unambiguous. Everyone in your team should understand exactly what success looks like.
Measurable – We help identify metrics that provide accurate and timely insights. Without solid data, improvement is impossible to track.
Achievable – Ambition must be balanced with realism. We work with your teams to ensure goals are within reach—supported by the right people, tools, and timeframes.
Relevant – Objectives must support the direction of the business. If your strategic goal is expanding into new markets, your quality goals should enable that, not distract from it.
Time-bound – Every objective must have a target date. Without urgency, priorities slip.

Our role is to ensure your objectives not only meet these criteria, but actively contribute to operational excellence.

Avoiding Common ISO 9001 Pitfalls

Having supported businesses across sectors, we know the challenges. Here are a few common mistakes Temple QMS helps clients avoid:

Vagueness: Objectives like “improve performance” don’t help your team take action. We help translate aspirations into tangible goals.
Overload: Too many objectives dilute focus. We work with you to prioritise a small number of high-impact goals.
Lack of ownership: Objectives must be driven by those responsible for achieving them. That’s why we embed ownership into your QMS structure.
No follow-through: We help implement robust review cycles and integrate objectives into regular reporting and management reviews.

Monitoring, Review, and Continuous Improvement

Defining quality objectives is just the start. Our consultants support you in building a dynamic review framework that includes:

KPI Dashboards – Real-time tracking of objective progress.
Regular Reviews – Structured check-ins to assess performance and adjust as needed.
Team Involvement – We ensure objectives are meaningful at all levels of your organisation.

At Temple QMS, we encourage our clients to celebrate milestones and learn from results—both successes and setbacks. This reinforces a culture of quality and energises your people to keep improving.

Your ISO 9001 Partner in Performance

Setting the right objectives is crucial to building a resilient and future-ready QMS. With Temple QMS by your side, you're not just setting goals—you’re building a system that delivers sustained value.

Whether you're implementing ISO 9001 for the first time or refining existing objectives, our hands-on consultancy will ensure your quality goals are more than just words on paper, they’ll be levers for real business improvement.

Let’s build your ISO 9001 success story together.

📞 Contact Temple QMS today and lay the foundations for measurable, meaningful progress. enquiries@templeqms.com.

Webinar: Achieving ISO 27001: Key Steps and Practical Insights

Temple Quality Management Systems — 28/04/2025

Discover how ISO 27001:2022 certification can transform your organisation's approach to information security, as we guide you through the essentials of this internationally recognised standard.

ISO 27001 is one of the most popular information security standards in existence, and implementing the standard in your organisation is fundamental in helping you to meet the requirements of laws such as the UK and EU General Data Protection Regulation (GDPR) and the Network and Information Systems (NIS) Regulations.

This June, join Alex Mullett for a webinar aimed at guiding you through the essentials of ISO 27001:2022 certification, providing practical insights into the process and control requirements.

Book your place

Join this webinar to gain insights into:

An introduction to ISO standards - explaining their purpose, scope, and significance in promoting global best practices
The key clauses and controls of ISO 27001 - providing a clear explanation of its structure and requirements
The four key groups of controls - Organisational, People, Physical, and Technological, and their illustrated importance using examples and scenarios
A step-by-step guide to achieving ISO 27001 certification - highlighting the preparation needed and the typical challenges faced by organisations
Real-life examples and tailored insights on meeting specific clause or control requirements to give attendees actionable guidance

The session will conclude with a Q&A, giving you the opportunity to ask our expert your key questions.

Register now to secure your spot - registration is free and an on demand recording of the live event will be made available to all registrants following the live webinar.

About the presenter:

Alex Mullett has over 25 years of experience across service and IT industries specialises in helping organisations achieve and maintain ISO certifications, including ISO 27001. As a CQI IRCA Lead Assessor, Alex conducts third-party audits and delivers value-added consultancy, webinars, and training courses.

Alex also holds Lead Auditor qualifications for ISO 9001, ISO 14001, and ISO 45001, demonstrating expertise across quality, environmental, and occupational health and safety management systems.

In response to the Building Safety Act, new student housing will be delayed by six months

Temple Quality Management Systems — 09/01/2025

Student housebuilder warns new building safety legislation could delay its projects.

As a result of the implementation of the Building Safety Act (BSA), Unite Students expects new student accommodation delivery schedules to be delayed by six months.

“As with any new regulation, this presents risks of delay due to capacity constraints at the Building Safety Regulator (BSR),” a company statement said.

“We will continue to work closely with the BSR to deliver safe and secure homes for students in line with our target delivery timetable,” it added.

A new set of rules and regulations came into effect under the BSA in October 2023 for contractors, manufacturers, and clients. As part of the golden thread rule, a digital record of the building must be maintained.

All residential buildings over 11 meters tall must also be funded for cladding remediation.

According to Unite Students' trading update, it is working on 13 projects and is "progressing cladding remediation".

“We continue to prioritise projects based on our external risk assessments and, having completed detailed surveys, expect to undertake works on 12 further properties in 2025,” it added.

Unite Students said earlier this year it expected to recoup up to three quarters of costs associated with remediation. As of 30 September 2024, it had claimed back £24 million from contractors, including £18 million in the three months prior.

Additionally, Unite Students voiced concerns about the completion of purpose-built student accommodation (PBSA) on time, stating that the supply of PBSA "remains constrained". At present, completion rates are about half what they were before the pandemic.

Despite this, it expressed a "positive outlook" for the student housing market in 2025/26 due to demographic growth.

Manufacturing is experiencing an increase in cyberattacks

Temple Quality Management Systems — 24/02/2025

Globally, 80% of firms experienced a significant increase in overall security incidents or breaches last year, according to a study by Omdia. In spite of this, only 45% of organisations are adequately prepared to deal with cyber security threats.

In its survey, Omdia interviewed over 500 technology executives about how they manage cyber security challenges and how they integrate information technology (IT) and operational technology (OT). As part of the study, Telstra International, Telstra's global arm, produced a report.

The Omdia report can be downloaded here:
Telstra International Omdia IT OT Whitepaper

Cyber attacks are on the rise as manufacturers are leveraging technologies such as the cloud, artificial intelligence and Internet of Things (IoT) as part of their digital transformation, otherwise known as Industry 4.0. In addition to increasing scale, resilience and efficiency in operations, the convergence of IT with traditional OT can increase scale, resilience and efficiency in operations, but it also increases the attack surface for cyber threats. Cyber exploitation, including ransomware, is becoming increasingly lucrative for critical industries.

Individual firms affected by a cyber attack reported a resilience or availability issue that cost them $200,000 to $2 million, with incidents affecting enterprise and corporate systems and production control accounting for the biggest losses.

Geraldine Kor, Telstra International’s Head of Global Enterprise Business, said: “Greater connectivity between IT and OT is necessary to harness advanced technology for manufacturing innovation, but it increases the risks of a breach. However, very few firms are mature in protecting and defending against such cyber risks.

“Our study also uncovered a fragmented approach to security responsibility, which can leave manufacturing businesses without a clear direction. This responsibility must be clear and integrated so that one group or person will have the authority to act on security challenges for mission-critical systems. It is equally important to have the right people and security-focused culture as their absence will hinder security posture readiness, compounding technical challenges.”

Ganesh Narayanan, Telstra International’s Global Head of Cyber Security, noted that manufacturing and other industrial sectors historically relied on air gapping for security, where OT systems are typically segregated from corporate IT systems to protect against external threats.

However, this approach is no longer sustainable with increasing IT/OT convergence, which expands the threat surface significantly.

He said: “IT and OT integration create enormous value for organisations across industries, although organisations must address risks to unlock its potential. Organisations should prioritise IT/OT and IoT security across six core areas: Collaboration and planning, defining a strategy, bolstering technical expertise, assign responsibility and accountability, leveraging the right tools, and expedite readiness with standards.”

Adam Etherington, Senior Principal Analyst at Omdia, said: “Our study illuminates critical attack vectors and lessons learned, and provides timely advice for any executive responsible for IT and OT.

“More pervasive connectivity between IT and OT is essential across greenfield and brownfield manufacturing system design and enhancements. Step change improvements to innovation, availability, safety and security require firms to harness cloud, IoT, AI and private networks, with IT/OT convergence bringing these technologies to life.

“However, most firms have been hit with expensive outages and security incidents while traditional security controls, policies and culture struggle to keep pace. Given the magnitude of downtime costs from any breach or network incident that impacted operations, it’s important to better understand the causes for proactive remediation.”

Speak to Temple about ISO 27001

Temple QMS is a leading provider of ISO/IEC 27001 implementation

ISO 27000 family of standards helps organisations keep information assets secure. Using this family of standards will help your organisation manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties.

Using identification, analysis, and actionable controls, the standard proposes a best practice framework for ISMSs that mitigates risks and safeguards business-critical data. An ISO 27001 certification demonstrates your organisation's commitment to protecting its information - and the information of its customers - from increasingly complex threats.

Myths vs. Reality: What You Need to Know About the Dark Web and Cyber Risks

Temple Quality Management Systems — 03/04/2025

If you think the internet is just about browsing cat videos on YouTube or checking your emails, you’re missing out on a much bigger and darker side of the web. Below the surface of the World Wide Web lies the deep web and, even further down, the dark web. But what exactly is the dark web, and should we be scared of it or just get to know it a bit better?

As a team focused on cybersecurity and ISO 27001 training, we know the importance of understanding all aspects of digital safety – including the dark web. In this post, we’ll break down the truth about the dark web, its risks, and how to safeguard your data. And don’t worry, we’ve got some tips for you on how Temple QMS can help your organisation stay ahead with ISO 27001 consultancy and training.

What is the Dark Web?

The dark web is a hidden corner of the internet that’s not indexed by traditional search engines. In simple terms, it’s the online equivalent of a secret back alley where people can stay anonymous. To access it, users need special software like Tor (The Onion Router), which helps mask your identity and protect your location. Think of it as a secret tunnel that allows you to explore without anyone knowing you’re there.

But here’s the kicker – while the dark web is notorious for illegal activities like hacking, fraud, and the sale of stolen data, it’s not all doom and gloom. It’s also a place for privacy-conscious individuals, activists, and journalists in oppressive regimes who need a safe, anonymous way to communicate.

So, is the dark web something to fear? Well, there are risks, but with the right precautions, it can be navigated safely.

How the Dark Web Works

Once you enter the dark web, you'll find a wide range of activities happening, both good and bad. On the darker side, you’ll find:

Stolen financial data like credit card numbers and bank logins.
Compromised accounts for Netflix, social media, and even subscription services.
Counterfeit goods including fake IDs and money.
Illegal substances and weapons.
Hacking tools and services, like malware and exploit kits.
Data for sale, including medical records, personal photos, and more.

It sounds like a digital dystopia, doesn’t it? But, interestingly, the dark web is also a haven for whistleblowers, journalists, and human rights advocates who need to operate securely and anonymously. The anonymity it provides is essential for protecting freedom of expression in repressive countries.

However, just like any other part of the internet, navigating the dark web is risky. Cybersecurity threats like malware, data theft, and scams are everywhere. That’s where dark web monitoring becomes essential, especially for businesses looking to secure their data.

The Origins of the Dark Web

Here’s something many don’t know: the dark web wasn’t designed for illegal activity. It was originally created by the U.S. military in the 1990s to help people communicate securely and anonymously, especially in hostile areas. The tool used for this was Tor, which allowed military personnel to maintain their privacy while working in dangerous environments.

Soon, Tor found its way to the public, and voilà, the dark web was born.

Dark Web vs. Deep Web: What’s the Difference?

To make things clearer, let’s break it down into layers, like an iceberg:

Open Web (4-5%): This is the part we all use every day – websites you can access via Google or other search engines.
Deep Web (90-95%): A huge portion of the web, including your private email accounts, online banking, and subscription services. It's not illegal, just hidden.
Dark Web (<1%): The smallest part of the deep web, accessible only through special tools like Tor. This is where most of the shady stuff happens.

Is It Illegal to Use the Dark Web?

Now, here’s a common misconception – simply accessing the dark web isn’t illegal. It’s what you do there that can get you in trouble. Browsing anonymously, engaging in discussions, or researching privacy resources are all perfectly legal activities.

In fact, the dark web has some really useful and legitimate functions:

Secure communication for people in repressive regimes.
Privacy resources, such as guides for encrypted email.
Whistleblower platforms like the dark web version of WikiLeaks.
Anonymous forums for discussing current events without fear of surveillance.

The Risks of the Dark Web

While it has some beneficial uses, there’s no denying that the dark web can be a dangerous place. Here are a few risks to be aware of:

Malware: Malware, ransomware, and viruses are all too common, often hiding in links or downloads on dark web sites.
Scams: Scammers set up fake shops, asking for payment in cryptocurrency, only to disappear once they have your money.
Identity theft: Criminals often trade stolen personal data, which could put your sensitive information at risk.
Honey pot traps: Some illegal marketplaces are actually set up by law enforcement to catch criminals, so engaging with them could lead to arrest.

The Role of ISO 27001 and Cybersecurity Standards

At Temple QMS, we’re all about helping organisations stay secure. One of the best ways to protect against the threats lurking on the dark web is by implementing robust information security frameworks, like ISO 27001.

ISO 27001 is a global standard for information security management. By adopting this framework, businesses can manage and protect their sensitive data through effective risk management strategies. But how does it help with dark web threats?

Risk Management: ISO 27001 helps organisations identify, assess, and mitigate risks, including those emerging from the dark web.
Security Controls: ISO/IEC 27002 provides practical security controls to reduce the likelihood of breaches and data theft.
Incident Response: ISO 27035 outlines the best practices for responding to cyber incidents, including monitoring the dark web for stolen data.

With the right ISO 27001 training and consultancy from us, you can ensure your organisation is protected from these kinds of cyber threats. Our services are designed to help you integrate these internationally recognised standards into your business, ensuring you’re always a step ahead of potential cybercriminals.

Get Trained with Temple QMS

The dark web is a real concern, but with the right cybersecurity strategies, it doesn’t have to be a threat for your organisation. By embedding ISO 27001 into your organisation’s culture, you’re taking a proactive approach to data security. At Temple QMS, we offer comprehensive ISO 27001 training and consultancy to help your business navigate these challenges with confidence. Let us help you protect your business from the threats lurking on the dark web.

Stay secure. Stay smart. Get ISO 27001 accredited with Temple QMS.

If you’re ready to learn more, get in touch with us today!

What is Cyber Essentials and how does it compare to ISO 27001?

Temple Quality Management Systems — 06/01/2025

Cyber Essentials is supported by the UK Government and managed by the National Cyber Security Centre (NCSC), in partnership with the Information Assurance for the Small to Medium Enterprise (IASME) Consortium.

The Cyber Essentials scheme establishes a standard set of IT security requirements to minimise the likelihood and impact of common cyber-attacks, regardless of the size of an organisation.

It covers devices, applications, and services that hold or process business data. As listed below, the requirements are grouped into five themes:

Firewalls
Secure configuration
User access control
Malware protection
Security update management

The scheme has two levels of certification. In addition to Cyber Essentials, there is Cyber Essentials Plus.

Cyber Essentials

This entry-level (self-assessment) certification covers all the controls necessary for certification and demonstrates adherence to Cyber Essentials' foundational level of cyber hygiene. A certified assessor of Cyber Essentials evaluates applicants' online questionnaires.

Cyber Essentials Plus

Identical controls are mandated by the Cyber Essentials standard at this higher level of certification. A certified assessor for Cyber Essentials Plus, however, conducts a physical test on the devices, applications, and services included in the scope. With this certification level, companies and clients can be confident that appropriate controls are in place and functioning properly. For Cyber Essentials Plus, candidates must achieve Cyber Essentials certification within three months of enrolling.

Do I need a certain level of certification?

Depending on your organisation's objectives, you will need a different level of certification. Below are a few examples:

MOD/UK Government Contracts:
To be eligible for MOD/Government contracts, organisations must be certified. The requirement stems from the importance of protecting the personal information of UK citizens and government employees.
Supply Chain:
In the supply chain, it is essential that companies demonstrate compliance with data protection laws, especially when handling sensitive and personal information. Your company's Cyber Essentials and Cyber Essentials Plus certifications indicate a strong commitment to data protection and cyber security.
Compliance:
With Cyber Essentials and Cyber Essentials Plus, your organisation can demonstrate to senior executives or board members that it has implemented essential safeguards. Specialised third-party companies provide an additional layer of assurance through the Cyber Essentials Plus certification.

ISO 27001: What is it?

As part of the ISO/IEC 27000 series of standards, ISO 27001 is part of a suite of standards designed to address information security. This standard, formulated by the International Organisation for Standardisation (ISO), provides guidance and a framework for establishing, implementing, and managing an Information Security Management System (ISMS).

Its complete designation is “ISO/IEC 27001 – Information Security, Cyber Security and Privacy Protection — Information Security Management Systems — Requirements.”

Its main purpose is to establish, implement, operate, monitor, review, maintain and improve an information security management system. With a risk-based approach, it is intentionally technology-neutral. It consists of 93 safeguards or controls divided into four categories: organisational, people, physical, and technical.

Some of the topics covered by these domains are:

Information security policy
Organisation of information security
Risk assessment and treatment
Asset management
Access control
Cryptography
Physical security
Operations security
Communications security
System acquisition, development, and maintenance
Supplier relationships
Compliance with legal requirements and industry standards
Information quality management
Risk monitoring and review

What is ISO 27001 and why do I need it?

Information security is governed by ISO 27001, a global standard. As the name implies, it is concerned with safeguarding all information assets, including both digital and physical formats, such as paper and microfiche.

ISO 27001 certification allows organisations to demonstrate superiority over competitors. The importance of supply chain management is becoming more apparent as organisations place a higher priority on it.

Is ISO 27001 the same as Cyber Essentials/Cyber Essentials Plus?

There are certain fundamental differences between Cyber Essentials and ISO 27001, although both standards are designed to assist organisations in demonstrating compliance.

Cyber Essentials:
In the UK, it is recognised as a technical compliance standard.
- Organisations must comply with compliance standards, not necessarily with their own internal rules and regulations.
- Digital information assets are the only assets covered.
- The term applies to assets and services that are connected to the internet.
- Protects against the most common cyberattacks.

ISO 27001:
This is a risk-based standard that is widely accepted worldwide. To manage risks to an acceptable level, organisations must understand risks within their organisations and implement policies, procedures, processes, and technical controls.

Process and policy are primarily the focus.
- Information assets of all types (physical and digital).

Unlike ISO 27001, Cyber Essentials is not an Information Security Management System (ISMS). On the other hand, ISO 27001 can be tailored to meet the needs of any organisation, no matter how large or small.

The ISO 27001 standard covers all the controls needed for Cyber Essentials, however.

What you need to know

Standards serve distinct purposes with specific scopes. Cyber Essentials must be met by organisations seeking government contracts or MOD contracts.

Cyber Essentials Plus certification is recommended for organisations seeking to demonstrate a high level of assurance in cyber security.

View how Temple QMS can support you with ISO 27001 training and consultancy.

Start-up compliance survival guide: ISO 27001, GDPR, and NIS 2 for success

Temple Quality Management Systems — 20/01/2025

As a startup founder, you're trying to do everything at once, from building a team and recruiting investors to perfecting your product. Compliance is the last thing you want to tackle. The consequences of non-compliance can be severe, so don't ignore them. The good news is that compliance doesn't have to be complicated with the right tools.

EU startup founders know that action is necessary, but they may not know where to start when it comes to frameworks such as ISO 27001, GDPR, and NIS 2. These frameworks are crucial for your startup's success, so we'll explain their meaning, why they're crucial, and how to address them.

The process will be straightforward and jargon-free so that you can see for yourself how stress-free it can actually be. So, let's examine how compliance can be beneficial to you.

ISO 27001 compliance: What are the benefits?

In the field of information security management systems (ISMS), ISO 27001 is the gold standard. Processes are established to protect sensitive data (such as customer information, company data, or employee information). An ISO 27001 certification builds a scalable security infrastructure for startups and demonstrates a strong commitment to information security.

What is ISO 27001 all about? In the first place, it signifies your commitment to data security to customers, partners, and investors. In the end, it demonstrates that you manage risks and protect sensitive information comprehensively and pro-actively. So, ISO 27001 is an important tool for mitigating risks associated with handling sensitive data, whether it's financial records or personal data.

GDPR: Protecting personal data

In the EU, data protection laws are governed by the General Data Protection Regulation (GDPR). In addition to customers' information, employee data, and even user-generated content, it applies to companies that process personal data of EU citizens. Anything that identifies an individual is covered by GDPR.

What's the good news? There's no need to be intimidated by GDPR. Data collection, security, and transparency are its three core principles.

It's fortunately not necessary to hire a huge legal team to navigate GDPR. Keeping user consent secure, maintaining transparency, and following best practices for data security puts you on the road to compliance.

NIS 2: EU cybersecurity regulation

NIS 2 stands for "Network and Information Systems Directive 2", which is the EU's enhanced cybersecurity regulation. Energy, transportation, healthcare, and finance are among the industries affected. Digital systems are essential to the operations of many startups, so NIS 2 compliance is imperative. Cyber threats are being thwarted by securing critical infrastructure.

NIS 2 can seem overwhelming to smaller businesses, but it's essential for building strong, secure networks and systems. By implementing proactive cybersecurity measures, this regulation prioritizes risk management and reporting security incidents.

A stress-free approach to these regulations

You now understand ISO 27001, GDPR, and NIS 2, so here's how to handle them:

Make compliance a priority early in the process. Make it a part of your startup's foundation to save time and money.
Automate: As a startup, your resources are limited. Keep up with compliance requirements with automation tools.
Make sure your ISO 27001 policy and quality management are robust. From the beginning, make data protection a priority. Cybersecurity measures should be taken to safeguard your digital infrastructure for NIS 2.
Consult an expert: Automation tools are valuable, but expert advice can further support your efforts, including GDPR legal advice or cybersecurity advice.
In order to prove compliance, you must document everything. The documentation you need can be generated and stored with tools like Scytale, so you're ready for audits and inspections.

Ultimately, navigating compliance as a startup doesn't have to be daunting. It can transform your business. ISO 27001, GDPR, and NIS 2 compliance isn't just about meeting legal requirements; it's about building trust with customers, showing your commitment to data security, and encouraging growth.

You can build a framework of compliance that will allow you to scale confidently with early planning, the right tools, and a focus on security. Take these steps now to future-proof your startup and establish a solid compliance foundation.

Take a look at Temple’s ISO 27001 training and consultancy.

Effective Integration of ISO Standards

Temple Quality Management Systems — 10/03/2025

Successfully implementing ISO standards can significantly enhance an organisation's efficiency, compliance, and overall performance. While the certification process may seem complex, having the right information and professional guidance makes it much more manageable.

Understanding which ISO standards apply to your business and how to integrate them effectively is key to maximising their benefits.

Understanding ISO Standards

ISO standards are globally recognised frameworks established by the International Organisation for Standardisation. They ensure quality, safety, efficiency, and interoperability across various industries, including:

Manufacturing
Technology
Information Security
Automotive
Aerospace
Construction
Healthcare
Environmental Management

Developed through international consensus, these standards help organisations demonstrate excellence and reliability. Some of the most commonly implemented ISO standards include ISO 9001, ISO 14001, ISO 45001, and ISO 27001.

Overview of Key ISO Standards

1. ISO 9001 – Quality Management

ISO 9001 focuses on quality management systems (QMS) to enhance customer satisfaction and promote continuous improvement. Implementing this standard helps organisations establish consistent processes that meet regulatory and customer expectations while fostering efficiency and accountability.

2. ISO 14001 – Environmental Management

ISO 14001 provides a framework for environmental management systems (EMS), enabling organisations to minimise their ecological footprint, comply with regulations, and enhance sustainability efforts. By implementing this standard, businesses demonstrate a commitment to environmental responsibility and improved operational efficiency.

3. ISO 45001 – Occupational Health and Safety

ISO 45001 sets the standard for occupational health and safety management systems (OHSMS), ensuring safer workplaces by identifying and mitigating risks. Adopting ISO 45001 helps organisations improve employee well-being, reduce workplace incidents, and foster a culture of safety.

4. ISO 50001 – Energy Management

ISO 50001 supports organisations in optimising energy use and reducing costs while improving overall energy efficiency. Implementing this standard enables businesses to meet regulatory requirements, set energy performance goals, and enhance sustainability efforts.

What Is an Integrated Management System (IMS)?

An Integrated Management System (IMS) unifies multiple ISO standards into a cohesive framework, streamlining policies and procedures across an organisation. For example, integrating ISO 9001 and ISO 14001 allows companies to simultaneously address quality and environmental objectives.

Benefits of an Integrated Management System

Implementing an IMS provides several advantages, including:

Improved Efficiency – Streamlining processes reduces duplication, saving time and resources.
Better Risk Management – A holistic approach ensures potential risks are identified and mitigated effectively.
Enhanced Stakeholder Confidence – Addressing multiple concerns, such as quality, safety, and sustainability, strengthens credibility.
Greater Adaptability – An integrated system allows organisations to stay agile amid regulatory and market changes.

Steps to Integrate ISO 9001 and ISO 14001

Combining ISO 9001 (quality management) and ISO 14001 (environmental management) requires a structured approach:

Secure Leadership Commitment – Gain support from top management to align both standards within the organisation.
Develop a Unified Framework – Use ISO’s high-level structure (HLS) to integrate quality and environmental objectives seamlessly.
Conduct a Gap Analysis – Assess current processes to identify areas needing improvement or alignment.
Establish Common Policies and Objectives – Create cohesive policies that support both quality and environmental goals.
Optimise Processes – Design workflows that meet quality expectations while minimising environmental impact.
Train Employees – Ensure staff understand their roles in maintaining an effective integrated system.
Monitor Performance Metrics – Track key indicators to measure the success of the integrated system.
Conduct Internal Audits – Regularly assess compliance and identify areas for continuous improvement.
Review and Improve Continuously – Foster a culture of ongoing enhancement and adaptation.

Integrating ISO 45001 for Workplace Safety

Combining ISO 45001 with other standards such as ISO 9001 and ISO 14001 further strengthens an organisation's management system. The benefits of integration include:

Reduced Duplication – Eliminates redundant documentation and processes.
Enhanced Compliance – Simplifies adherence to multiple standards and legal requirements.
Holistic Improvement – Recognises the interconnected nature of quality, safety, and environmental factors.
Stronger Organisational Culture – Encourages a unified approach to quality, sustainability, and workplace safety.

For instance, construction companies often integrate ISO 45001 and ISO 14001 to address both safety and environmental concerns in their operations.

ISO Certification vs. Accreditation: Understanding the Difference

ISO certification is awarded to organisations that meet specific ISO standard requirements, verified by an independent certification body. In contrast, accreditation is granted to certification bodies by recognised accreditation organisations, ensuring their credibility and authority.

Achieve ISO Compliance with Expert Guidance

Integrating ISO standards enhances efficiency, improves compliance, and strengthens operational excellence. If you're ready to streamline your processes, improve sustainability, and achieve certification, professional support can make the transition seamless.

At Temple QMS, we specialise in guiding organisations through ISO integration, helping them align standards like ISO 9001, ISO 14001, ISO 45001, and ISO 50001 effectively.

Request a quote today to begin your journey toward ISO certification and operational excellence.

ISO 14001:2026 - What’s changing and how to prepare

Temple Quality Management Systems — 03/07/2025

A revised version of ISO 14001 – Environmental Management Systems is currently in development and is expected to be published in January 2026, replacing ISO 14001:2015.

The revision aims to bring greater clarity to existing requirements, align with ISO’s Harmonised Structure, and integrate key updates such as climate change considerations.

Status of the Revision

The drafting process began in late 2023. By February 2025, the standard reached the Draft International Standard (DIS) stage, allowing national member bodies to vote and provide comments. While the draft was approved by a majority, numerous comments were submitted. As of June 2025, these comments are under review ahead of the next development stage.

Key Proposed Changes to ISO 14001:2026

Here are the main proposed updates to the standard:

1. Climate Change and Broader Environmental Perspectives (Clauses 4.1 and 4.2)

The 2024 climate change amendment (ISO 14001:2015/Amd1:2024) is now fully integrated. The revised standard goes further by also requiring consideration of resource use, pollution levels and biodiversity.

2. Clarified Planning for Risks and Opportunities (Clause 6.1)

Clause 6.1.1 (General) has been reorganised. Most of its content now appears in a new clause, 6.1.4 ‘Risks and Opportunities’, while ‘Planning Actions’ becomes Clause 6.1.5. These adjustments are intended to improve clarity.

3. Environmental Aspects (Clause 6.1.2)

A new note explains the lifecycle perspective more clearly. There's also a more explicit requirement to identify potential emergency situations with environmental impacts.

4. New Clause on Change Management (Clause 6.3)

A new clause has been introduced to require a structured process for planning and managing changes relevant to the environmental management system.

5. Operational Planning and Control (Clause 8.1)

The scope has been broadened. Where the 2015 version focused on outsourced processes, the revised text now includes all externally provided processes, products and services.

6. Improvement and Annex A Updates (Clause 10)

Clause 10 has undergone renumbering and consolidation with limited changes in substance. Annex A has been significantly revised to enhance clarity and support the interpretation of clauses 4 to 10.

Overall, the proposed changes are considered moderate and are less extensive than those seen during the transition to the 2015 version.

Transition Timelines

The International Accreditation Forum (IAF) is expected to publish mandatory transition guidelines before the release of the final version of ISO 14001:2026. While transition periods usually last up to three years, a shorter period may apply due to the limited nature of the changes.

How to Prepare

To ensure a smooth transition, organisations should take early action. Here are some recommended steps:

Familiarise yourself with the proposed changes as soon as possible.
Provide training for relevant personnel to ensure they understand the revisions and their implications.
Conduct a gap analysis to identify areas needing updates or clarification.
Develop and implement a transition plan to ensure your management system remains compliant.

Support from Temple QMS

Temple QMS is ready to support your organisation through this transition with expert guidance and tailored solutions, including:

ISO 14001 Training Courses to ensure your team fully understands the revised requirements.
Consultancy Services to help identify gaps, plan changes and implement improvements aligned with ISO 14001:2026.
Ongoing support to build a robust, high-performing Environmental Management System.

Preparing early will not only ensure compliance but also strengthen your organisation’s environmental performance.

If you’d like to learn more about how Temple QMS can help you prepare for ISO 14001:2026, get in touch today.

Temple QMS joins ICW Collaborative Working reception at the House of Lords

Temple Quality Management Systems — 15/05/2025

Temple QMS, a leading training and consultancy firm dedicated to delivering quality and collaborative excellence, was proud to attend the ICW Collaborative Working Reception 2025, held on 14 May at the historic Cholmondeley Room and Terrace of the House of Lords, London.

Hosted by Lord John Hannett, Chairman of the Institute for Collaborative Working (ICW), this exclusive, invitation-only event brought together senior leaders, influential thinkers, and members of ICW’s Executive Network to celebrate collaborative success stories and discuss the future of partnership-driven business.

The reception, sponsored by BAM UK & Ireland, featured high-level networking and strategic dialogue, further enriched by a keynote address from Alan Cox, Managing Director of BAM UK & Ireland. It also marked the launch of the Collaborative Awards 2025 and the unveiling of The Partner, ICW’s flagship annual publication.

For Temple QMS, known for guiding organisations toward high standards in quality, compliance, and collaborative practices, the event was a natural fit. Participation at this prestigious gathering not only reflects Temple QMS’s commitment to advancing collaborative methodologies but also reinforces its standing within the UK’s ecosystem of trusted consultancy providers.

As collaborative working continues to shape the future of public and private sector partnerships, Temple QMS remains at the forefront, offering strategic insight, training excellence, and a passion for building better, together.

Change management: What it is and how it works

Temple Quality Management Systems — 08/01/2025

A world in which change is the only constant makes complacency impossible for organizations. All business leaders must adapt to the pace of technological change. Adapting to disruption isn't enough anymore. A change management perspective can help organizations get ahead of the competition by challenging the way they think about change.

Over the last quarter of a century, change management has evolved into a discipline. It refers to minimizing disruptions to critical systems and services while making changes in information technology (IT). During changes to systems, processes, and technology, a good change management process is critical for information security.

Exactly what is change management?

Change management can be defined as a game plan. When it comes to controlling the changes that flow through an IT system, product, or development of a software platform, change management refers to the methodologies that surround people, process, and culture. As a result, IT change management helps organizations adapt easily and efficiently to new processes and technologies in information security.

Management expects IT teams to embrace new technology regularly, and they must be able to adapt to constantly changing security and business requirements. When it comes to launching new services, managing existing ones or resolving problems in code, a well-oiled IT change management process is crucial.

Enhancing change capability

Change doesn't happen in silos, which is a fundamental principle of all change management theories. In one way or another, it impacts the entire organization and all its members. As a matter of fact, there are always those who want to maintain the status quo. In other words, in order to make change successful, individuals have to be prepared, equipped, and supported while going through the motions of change.

Employees who have good change management can:

Understand why the change is taking place
Rapidly, completely, and proficiently adopt changes
Participate in disruptive change with your organization
Feel heard and supported when you have the time and tools to get involved

Providing training and support, and being available to answer questions can help achieve this. To drive the project forward, leadership has to be on board as part of the change management process.

Change management consists of what elements?

Managing change is about ensuring that everyone understands why the change is taking place and how it will be implemented. By doing this, you can ensure that everyone involved in the change project is aligned and happy. Managing change - and resistance to change - may seem daunting at first, but adopting a few key elements of change management will help you succeed.

Typically, they consist of six main parts:

Leadership alignment: Get leaders to present a united front; this is essential to successfully drive change forward.
Stakeholder engagement: Secure buy-in from all those affected by the change initiative to ensure they are fully engaged and an integral part of the process.
Communication: Be prepared to communicate not just once, but over and again, as this helps keep everyone motivated and focused on the task at hand.
Training: Educate employees to better handle the changes in process, workflow and environment that are coming their way.
Change impact and readiness: Assess how the change will impact your business processes and people as the organization moves through the paces of change.
Continuous improvement: Change is good, but monitoring change is better.

Setting a change management framework

Supporting your employees through the change process enhances the effectiveness of your change management program. A structured approach - or framework - is essential to guiding individuals through the change and ensuring that they embrace and adopt it. Any organizational change programme can be guided by a change management framework, which consists of a set of action steps. There are three most popular methodologies: ITIL, COBIT, and Agile.

Practitioners of change will need to resolve these challenges swiftly and efficiently, as most of these frameworks present exciting challenges, but also major complexities. Their ability to apply key change frameworks must be paired with current knowledge of change management. A number of globally recognized credentials allow professionals to demonstrate their expertise as change leaders. Change Management Certifications offered by Prosci, ITIL and Agile are excellent options.

What is the best change management model for you?

The management of change is based on a variety of frameworks and models. Kurt Lewin introduced the Lewin's Change Management Model in the late 1940s as a three-stage approach for transforming an organization. Today, many change management frameworks and models are based on his unfreezing, moving, and refreezing model. In addition to the 7S Model, Kotter’s 8-Step Change Model, and Prosci’s ADKAR Model, Kübler-Ross has a variety of models.

Various change management models emphasize employee-related goals associated with change, while others work to ensure a 360° understanding of the change, or techniques to manage resistance. Organizations can implement change in a controlled and organized manner by following each structure.

An effective change management process consists of five steps

Change management processes refer to the stages involved in implementing a change management strategy. In order to navigate the transitions of change, it ensures that all factors are taken into consideration. A few basic steps can be identified in the change management process:

1. Prepare for change:
It involves understanding the changes required and preparing staff members and stakeholders. Through communication and securing leadership buy-in, the change manager supports staff through any concerns.

2. Create a vision for change:
As soon as stakeholders agree to the change, managers need to create a comprehensive and realistic plan to implement it. Besides setting goals and defining key performance indicators (KPIs), the plan should also identify the timeline and resources needed. In this step, the change management team also considers security risks and potential problems.

3. Implement the changes:
To implement the changes, follow the steps outlined in the plan. In order for this process to run smoothly, good management and communication are essential at this stage.

4. Cement the changes:
Ensure the transformation is in place once the changes have been made. Any remaining issues are scrutinized and resolved before the project is closed; this requires monitoring the changes' impacts from a security perspective.

5. Review and analysis:
This final step ensures that the change is beneficial. An analysis of the project post-mortem can help leadership determine whether the change initiative was successful, unsuccessful, or incomplete. With this labeling system, future changes can be made with greater precision and utility.

In order to carry out updates in a rational and predictable manner, a change management process is used. ISO/IEC 27001 provides more guidance on creating a change management plan. Those familiar with ISO/IEC 27001 know that it is built on effective policies and procedures. Information security practices should be documented and implemented in accordance with guidelines on change management. Regularly check for negative impacts - and improve if necessary.

How can change management be successful?

Regardless of how big or small the change is, a well-thought-out change management process is essential. Modern approaches to change management avoid bottlenecks and minimize risk while breaking down silos, providing context and transparency. There are also the following benefits:

Improved communication:
It promotes better communication throughout the organization when employees are informed about changes.
More productive workers:
Employees are more likely to concentrate on their work if there is a clear plan in place for how changes will be implemented.
Better work environment:
When employees are uncertain about the future, change management provides clarity and structure to help minimize this stress.
Improved morale:
Positive work environments are created when employees feel valued as part of the change process and their concerns are heard.
Enhanced business processes:
As change brings opportunity, change management can help employees unleash their creativity.
A competitive advantage:
Changing a company's position in the marketplace positively impacts its competitive position.

Even so, change management isn't always easy. Despite its drawbacks, it helps organizations stay competitive and resilient in today's digital economy when it does work.

The art of making change stick

Does that mean the end? Actually, no. It is only the beginning of the change management process when it is implemented. After you've started the process, you need to ensure it stays alive and that the benefits are cemented. As the change journey continues, vigilance and reinforcement are required. Now is the time to reinforce the change by developing people's skills, refining processes, and utilizing change readiness.

Before, during, and after a project, change management principles can help you achieve the desired results. It is, however, the customer that will determine the success of your process - that is the best measure. Positive customer experiences have a positive impact on your bottom line, and successful change programmes will positively impact customer experiences. What a worthy return on investment!

Temple's expansion leads to new office relocation

Temple Quality Management Systems — 18/02/2025

International consultancy and training provider Temple QMS, has today announced it has relocated its Head Office, driven by the growth of training and consultancy services. This has resulted in a planned increase in support staff and new, larger premises.

Temple's employees will be moving to a new location, JQ Modern in the Jewellery Quarter starting today. Its location on Vyse Street is part of its long-term commitment to remaining in the second city and growing its employee base, and adjacent to the train station.

JQ Modern's facilities include boutique communal lounges, a refectory with fresh coffee and snacks, informal meeting spaces, and formal meeting rooms for 4 to 16 people. They also include bicycle parking, electric car charging stations, storage areas, and ultra-fast Wi-Fi.

Temple aspires to grow its popular business training service, as well as the number of people required to service its clients. The refurbished facility is intended to provide a truly modern and collaborative workspace for its staff and clients.

The new offices have a tram stop and train stop a few yards from the front door, and a 600-space car park immediately adjacent. The area boasts some of the best independent coffee shops, cafés, bars and pubs in the city.

With hundreds of courses delivered virtually and onsite, Temple is a leading provider of business improvement and management system training. Its training courses are based on international standards, including ISO 9001, ISO 27001, ISO 45001, and ISO 14001, among others.

In addition to consultancy services and CQI and IRCA approved training courses, Temple supports organisations internationally in all sectors to implement and improve business management systems, ISO Standards, risk management, and compliance while empowering organisations and their people to thrive.

Jaz Tanwar - Operations Director at Temple QMS said:
Our move to Birmingham will be an excellent springboard for our future expansion plans. Temple looks forward to many more years of success. In JQ Modern, our employees will enjoy a collaborative, innovative and comfortable working environment.

Embracing AI in Quality Management: From Pilot to Practical Value

Temple Quality Management Systems — 29/05/2025

By Ian Hughes, Temple QMS

Artificial Intelligence (AI) continues to dominate headlines, but for quality professionals, the challenge lies not in understanding the buzz—but in finding practical, proven ways to apply AI within quality management systems today.

Many professionals remain cautious, viewing AI as something for tomorrow, or as a marketing trend rather than a meaningful tool. This hesitation is understandable. After all, we are in the early stages of a significant technological shift, where questions of value, accuracy and application are still being explored. Yet by waiting too long, organisations risk falling behind as more proactive businesses begin to leverage AI’s real and growing potential.

The Shift Has Already Begun

Forward-thinking companies are already implementing AI in ways that enhance their existing quality systems. One example is conversational AI, where team members interact with their QMS using natural language rather than searching through menus or dashboards. These aren’t gimmicks—they represent the early stages of a shift toward more responsive, efficient quality management.

The exciting part is that you don’t need to start from scratch. Many of the tools and platforms already in use can be enhanced with AI to deliver immediate benefits. This isn’t about reinventing the wheel—it’s about making it turn more efficiently.

From Automation to Augmentation

While AI is commonly associated with content generation, the more impactful applications for quality professionals lie elsewhere. AI can help move quality management from a reactive approach to a more predictive and proactive one.

Imagine using predictive analytics to detect process drift before it results in failure. Or optimising your risk-based prioritisation so that resources are focused where they are needed most. AI can also be used to determine the most efficient inspection frequencies and sample sizes, helping reduce both cost and effort.

At Temple QMS, we see these applications as not only realistic, but increasingly necessary. The gap between early adopters and those who hesitate is widening. Those who wait for perfect, off-the-shelf solutions may find themselves trying to catch up with competitors who are already integrating AI into their strategic planning.

Practical Applications You Can Use Today

The real value of AI lies in its ability to process complex data and eliminate repetitive administrative tasks. Here are some practical, real-world use cases that are already delivering value:

Data extraction: AI can analyse exported analyser data (in formats such as CSV, JSON or XML) and automatically map it to the correct QMS data model, saving hours of manual setup.
Certificate of Analysis (CoA) automation: AI can scan incoming CoAs, extract relevant data and trigger alerts when values fall outside of specification. This provides real-time oversight and strengthens quality assurance.
Excel and document automation: Quality professionals often spend a great deal of time trawling through spreadsheets. AI can extract the required data from Excel files, PDFs, handwritten notes or even whiteboard images, helping teams focus on decision-making rather than data entry.
Natural language QMS interaction: Instead of navigating through databases, users can simply ask a question and receive real-time insights. This not only accelerates access to information, but also empowers non-technical staff to make informed decisions.

Each of these examples supports a more collaborative and engaged approach to quality—one where people are informed, processes are streamlined, and data is used more intelligently.

Building Trust, Managing Risk

Of course, AI adoption is not without its challenges. Trust remains a legitimate concern, particularly around data accuracy and reliability. AI systems must be trained with care, tested rigorously and implemented with strong governance. Legal and compliance considerations—including GDPR and data ownership—must also be addressed before deployment.

However, none of these issues are insurmountable. With the right approach, AI can be introduced gradually, starting with low-risk applications and scaling as confidence grows. In fact, some of the most effective implementations begin with automating small, repeatable tasks—freeing up time and resources for more strategic improvements.

The Road Ahead

AI doesn’t need to be disruptive to be transformative. In the context of quality management, its greatest value lies in simplifying complex tasks, improving data visibility, and enabling quicker, smarter decisions.

By embedding AI into your QMS, you’re giving your team more time to focus on what matters most: improving quality, reducing risk, and delivering better outcomes for customers.

Key Use Cases to Explore Today

Here are a few ways AI can already support your quality team:

Extract data from documents, PDFs or scanned images
Suggest improvements in audit planning
Assist with root cause analysis and reporting
Automate scheduling for recurring quality events
Visualise data through charts and interactive dashboards

These are only the first steps. The key is to start small, measure outcomes, and adapt as you go. Over time, AI moves from being a tool for automation to one of strategic augmentation—helping your team to think, act, and improve more effectively.

Final Thoughts

Smart quality management is not a future concept—it’s already here. And those who begin to harness AI’s power today will be better equipped to face tomorrow’s challenges. At Temple QMS, we believe AI should act as an assistant, not a disruptor, supporting quality teams with the insights, tools and time to focus on what truly matters.

If you’d like to learn how AI can enhance your QMS, get in touch. Let’s explore what’s possible—together.

Rebuilding Trust: Dame Judith Hackitt’s Call for Competence Across the Built Environment

Temple Quality Management Systems — 27/05/2025

Rebuilding Trust: Dame Judith Hackitt’s Call for Competence Across the Built Environment

In a powerful interview with SFG20, Dame Judith Hackitt, former Chair of the Health and Safety Executive and architect of the landmark post-Grenfell regulatory reform, offered a frank assessment of the UK construction sector's progress under the Building Safety Act. Her comments cut to the heart of a persistent issue that Temple QMS has long recognised: a sector-wide competence gap that threatens not just compliance but also the safety and trust essential to the built environment.

A Wake-Up Call the Sector Should Have Heeded Sooner

Dame Judith’s warning was unambiguous. The failures exposed by the Grenfell Tower tragedy reflected a systemic collapse, not an isolated anomaly. The shortcomings — poor safety practices, blurred lines of accountability, and fragmented oversight — were known well before the fire. Her 2018 independent review laid them bare.

At Temple QMS, we see echoes of these same systemic issues today. As we help organisations prepare for and comply with the Building Safety Act, we routinely encounter confusion over duties, uncertainty about standards, and a lack of readiness. This stems not from unwillingness but from a widespread skills and knowledge deficit.

Building Safety Act: Clearer Responsibilities, Inconsistent Response

One of the Act’s major strengths, as Dame Judith noted, is its emphasis on clear accountability, especially for building maintenance. This aligns closely with our ethos at Temple QMS. Good compliance is about understanding who is responsible, what they are responsible for, and how to discharge that responsibility effectively.

Yet the sector’s response has been inconsistent. Dame Judith observed that while some organisations have embraced the changes, others remain paralysed, awaiting clearer direction or relying on poor guidance. This reinforces the urgent need for competence-based training and support, not just more documentation.

Competence Isn’t Optional — It’s Foundational

Perhaps the most important takeaway from the interview is Dame Judith’s emphasis on competence as a non-negotiable foundation for progress.

“We know that this isn’t just about the guidance, but is also about a lack of overall competence throughout the sector.”
— Dame Judith Hackitt

At Temple QMS, we couldn’t agree more. We believe that frameworks, procedures, and systems are only as good as the people implementing them. That’s why we work with organisations to build robust, evidence-based competence management systems. These integrate continuous professional development, clear accountability, and third-party certification wherever possible.

The reality is stark. Without widespread improvements in competence, the Building Safety Act will be undermined by misinterpretation and poor execution.

A Call to Action for Building Owners and Dutyholders

Dame Judith’s advice to building owners is particularly telling. Understanding your building, inside and out, is now a legal and moral imperative. This includes everything from establishing the “golden thread” of information for new builds to auditing legacy structures with limited documentation.

In our work, we find that many building owners are only now beginning to grasp the scale of their responsibility. Asset understanding and data management are essential starting points. However, these must be underpinned by competent staff and advisors who can interpret, apply, and maintain compliance.

Simpler Guidance, Better Outcomes

The interview also highlighted the fragmented and overly prescriptive nature of current guidance. Dame Judith rightly pointed out that siloed documentation leads to siloed thinking. This is something we frequently see in practice.

Our role at Temple QMS is to help organisations navigate this complexity by translating guidance into practical, joined-up strategies. That requires more than box-ticking. It demands sector-wide alignment on what competence looks like and how it is maintained.

Looking Ahead: Safety, Quality, and Productivity Aligned

Dame Judith ended on a hopeful note. She believes the industry will eventually look back on this period as one where safety, quality, and productivity came together. We share that vision. But it will only be realised if the industry moves beyond compliance as an endpoint and embraces competence as the driver of meaningful, lasting improvement.

Final Thoughts

Dame Judith Hackitt’s message is clear. The built environment must do better and can do better through a commitment to competence at every level. At Temple QMS, we’re proud to support organisations on that journey, providing the tools, training, and assurance needed to meet not only the letter but the spirit of the Building Safety Act.

For those still unsure of the next step: don’t wait for clarity. Seek competence and compliance will follow.

Learn more about how Temple QMS can help your organisation achieve competence-based compliance with the Building Safety Act.

📩 Contact us at enquiries@templeqms.com

Temple QMS celebrates Birmingham’s prestigious ‘World Craft City’ status.

Temple Quality Management Systems — 03/06/2025

Here at Temple QMS, we’re absolutely thrilled to celebrate the incredible news that Birmingham has been awarded the coveted ‘World Craft City’ status by the World Crafts Council!

This prestigious global accolade recognises the city’s rich heritage in the jewellery and craft trade, a heritage we’re proud to be at the heart of, with our offices based right in the vibrant Jewellery Quarter.

Birmingham’s Craft Legacy: A Global Stage

Birmingham’s Jewellery Quarter has long been synonymous with masterful craftsmanship, creativity, and innovation. This new recognition places Birmingham alongside just a handful of distinguished European cities, including Bornholm in Denmark and Stoke-on-Trent, cementing its position on the global stage as a hub for exquisite craft and design.

The accolade honours not only the economic impact but also the deep social and cultural contributions of the local community. From Birmingham City University’s School of Jewellery to the historic Assay Office and Coffin Works, the city’s commitment to preserving and evolving its craft traditions is nothing short of inspiring.

Quality at the Core: Why This Matters to Temple QMS

At Temple QMS, we understand that world-class craftmanship doesn’t happen by accident, it’s rooted in quality, precision, and continual improvement. That’s why we’re passionate about providing bespoke training and consultancy services designed to help businesses across industries embed robust quality management systems.

Just as Birmingham’s artisans uphold the highest standards to create timeless pieces, organisations need strong frameworks to consistently deliver excellence and foster innovation. Achieving and maintaining quality is essential — not only to meet customer expectations but also to drive growth and sustainability in an ever-changing global marketplace.

Crafting a Future Together

Birmingham’s World Craft City status is more than a badge of honour — it’s a beacon of opportunity. The upcoming Birmingham Jewellery Biennial festival, featuring open studios, fairs, heritage tours, and trade conferences, promises to shine a spotlight on both established masters and emerging talent.

This vibrant creative ecosystem mirrors what Temple QMS champions every day: the power of knowledge exchange, collaboration, and continuous development to unlock potential.

Our Commitment

As Birmingham takes its rightful place among the world’s top craft cities, Temple QMS is proud to support this journey by helping local and global businesses alike embrace quality excellence. Whether you’re an artisan looking to scale up or a company aiming to refine your processes, we’re here to provide tailored solutions that make a real difference.

Congratulations, Birmingham! Here’s to a future crafted with skill, passion, and quality, we’re excited to be part of it.

92% of manufacturing SMEs anticipating skills gaps, new report finds

Temple Quality Management Systems — 11/02/2025

Almost nine out of ten manufacturing SMEs in England anticipate some kind of skills gap within their company, with a third at entry level (33%).

This year's Skills Horizon Barometer, launched by the Skills for Life campaign, also found that nearly four in ten (38%) SMEs in the industry have noticed a skills gap in specialist areas.

The number of SME employers citing staff retention as a concern has decreased since last year - this year, three out of ten (30%) said it was a concern, down from three out of ten (33% in 2024).

The use of AI in specialist skills is firmly on the radar for the year ahead across England, as nearly a quarter (23%) plan to train or hire staff with AI knowledge. Researchers found that one in five (19%) companies regularly use AI in their day-to-day operations, with another 20% using it occasionally. Additionally, one in five (19%) say experience in AI is an asset on a CV.

As SMEs look for candidates, they are also looking beyond the skillset for human characteristics or transferrable skills that fit their organisation.

Manufacturing employers will be intrigued by these five top skills for 2025:

A good work ethic (40%)
Ability to work under pressure (30%)
A team player (28%) / A quick learner (28%) / Adaptability (28%)
A good personality fit for the business (22%)
Strong digital skills (19%)

Employers seek candidates who are early in their careers, but also have some experience (49%), when it comes to hiring manufacturing SMEs. A fifth (19%) of businesses still prefer to hire people from traditional academic backgrounds, such as university, but just over a fifth (22%) would hire directly from schools or colleges, providing relevant training for young people to enhance their skills, while 25% would prefer to hire people with different experience.

As a result of the latest Skills Horizon Barometer, SMEs are better able to understand all of the technical education and employment opportunities available to them, such as apprenticeships, T Levels, Skills Bootcamps, HTQs, as well as numeracy and digital skills training.

Download the report

Safeguarding Workplace Well-being: Managing OHS Hazards for Business Success

Temple Quality Management Systems — 17/03/2025

How Do Health and Safety Incidents Impact Your Business?

When an employee is injured or falls ill, the repercussions can be substantial. From disrupted productivity to the psychological strain on other staff, the effects are far-reaching. People are the bedrock of any business, making the effective management of occupational health and safety (OHS) crucial for success.

Unmanaged risks to health, safety, and well-being can undermine your organisation’s mission, growth potential, and long-term resilience. Therefore, it is vital to identify hazards, implement risk reduction strategies, and foster a protective workplace culture.

Understanding OHS Hazards

An OHS hazard refers to any work-related situation, activity, or process that poses harm. These can range from frayed wiring and working at height to chemical exposure and excessive workloads. Failure to address these hazards leads to OHS risks.

Common OHS Risks:

Mental ill-health: Stress, anxiety, and burnout can diminish performance and lead to serious physical health issues.
Exhaustion: Chronic fatigue can increase accidents, errors, and long-term health conditions such as high blood pressure and heart disease.
Communicable diseases: Illnesses like flu or COVID-19 can spread quickly without preventive measures, causing absenteeism and performance decline.
Non-communicable health conditions: Poor ventilation, unsafe food handling, and chemical exposure can lead to heart disease, diabetes, and obesity.
Work-related injuries: From repetitive strain injuries to life-altering accidents, unsafe conditions can cause absenteeism, legal liabilities, and low morale.

Types of Hazards

Effective hazard identification is key to thorough risk assessment. Here are six essential hazard types:

Safety hazards: Slippery floors, heavy machinery, and electrical equipment require regular inspections and risk assessments.
Chemical hazards: Proper handling, storage, and ventilation are critical for managing hazardous fumes and flammable liquids.
Physical hazards: Exposure to extreme temperatures, radiation, loud noise, and poor lighting can have long-term effects.
Ergonomic hazards: Heavy lifting, prolonged sitting, or repetitive motion can lead to musculoskeletal issues.
Biological hazards: Bacteria, moulds, animal waste, and blood-borne pathogens need specific controls.
Psychosocial hazards: Addressing stress, harassment, bullying, and discrimination is vital for well-being.

The Cost of Workplace Hazards

Unmanaged OHS risks lead to direct costs like medical care, staff replacements, and equipment repairs, as well as legal fines and higher insurance premiums. Indirect consequences include:

Lost productivity due to absenteeism and disrupted operations.
Recruitment and training expenses for replacements.
Increased insurance premiums from frequent incidents.
Administrative costs for managing claims and documentation.
Damage to company reputation, affecting client trust and recruitment efforts.

Reducing OHS Risks

Conduct thorough hazard identification and engage with your team to uncover risks.
Implement controls following a risk assessment to prevent ill health and injury, including psychosocial risks.
Evaluate the effectiveness of your strategies regularly, adjusting for internal and external changes.
Document risk assessment results to track progress and ensure compliance.
Monitor and review OHS performance through continuous evaluation and corrective action.

Proactive Risk Management with Standards

ISO standards, such as ISO 45001, assist in building safe work environments. They help businesses comply with legal requirements and embed health and safety into their culture. Key requirements include:

Understanding the operational context and OHS impact
Demonstrating leadership and commitment to safety
Regularly identifying and assessing hazards
Involving workers in decision-making
Providing resources and training
Preparing for emergencies
Continuously improving OHS performance

The Benefits for Your Business

For Large Corporations:

Enhanced brand and reputation
Meeting corporate social responsibility commitments
Building strong stakeholder relationships
Promoting investor confidence

For Small Enterprises:

Meeting OHS requirements to secure contracts
Avoiding business disruption and loss of key staff
Boosting employee morale and loyalty
Access to affordable insurance coverage

A Blueprint for Resilience

A healthy and safe work environment is essential for business success. Effective risk management not only protects workers but also reduces costs and enhances productivity. By fostering a supportive culture prioritising health and well-being, organisations can achieve better compliance and thrive in the long run.

At Temple QMS, we are committed to helping businesses embed quality and excellence into their operations, ensuring sustainable growth and resilience through robust OHS management systems. Contact us today about our ISO 45001 training and consultancy.

Temple celebrates JCB delegates' success

Temple Quality Management Systems — 10/02/2025

Temple Management Training Ltd is proud to celebrate the achievements of the 2024 JCB delegates who successfully completed the CQI and IRCA Practitioner modules.

This accomplishment marks a significant milestone in their professional development and reflects their dedication to quality and continuous improvement.

Congratulations to Chris Barlow, Lewis Edwards, Kendal Irvine, Aaron Hawley, Philip Lloyd, Tommy Burnett, Mark Barnes, John Roberts, Hannah Alsopp and Lee Else. The training was provided by Bob Hughes and John Dedman.

As an approved training provider with the Chartered Quality Institute (CQI), Temple Management Training Ltd is committed to equipping professionals with the expertise and skills needed to excel in quality management and auditing.

The successful completion of these modules by the JCB delegates highlights the effectiveness of our training programs and the commitment of the participants to advancing their careers.

CQI and IRCA Certified Practitioner courses provide delegates with a full understanding of management level quality topics. These courses are designed specifically for people who are currently practising quality and are aspiring towards middle management. Click on the courses below for details.

CQI & IRCA Practitioner Courses

PT202 – Managing process performance
PT203 – Managing Management Systems
PT204 – Managing Change and Continual Improvement
PT205 – Managing Problem Solving
PT206 – Managing Supply Chains
PT207 – Managing Customer Excellence
PT208 – Managing Quality Planning
PT209 – Managing and Influencing Stakeholders

Bob Hughes, Managing Director at Temple Training Ltd said:
“We are incredibly proud of the JCB delegates for their commitment, work and dedication throughout the Practitioner modules. Their success is a testament to their commitment to professional excellence and continuous learning."

Temple Management Training Ltd remains dedicated to supporting professionals across industries in quality excellence through industry-recognised training and certification programs.

JLR to use renewable tyres on luxury vehicles

Temple Quality Management Systems — 09/07/2025

Developed specifically for JLR by Pirelli, the new ‘P Zero’ tyres combine high performance, and durability, with a high bio‑based and recycled material content.

New tyres will debut on Range Rover later this year, with the aim to roll out more widely across JLR’s future models.

JLR will be the first in the industry to introduce newly developed tyres containing more than 70% renewable and recycled materials such as silica from rice husks and plant‑based resins, at scale.

Combining materials with reduced environmental impact without compromise on quality and performance standards for its clients, the new tyres will be available this year as standard on select New Range Rover models where a 22" wheel is specified, ahead of a wider roll‑out and aim to expand across its other brands.

Developed with global tyre manufacturer Pirelli specifically for JLR, the new P Zero tyre contains silica, used to enhance wet performance in tyres, sourced from rice husks, a natural by‑product of rice milling. Fossil‑based polymers and resins, used to help optimise the balance between dry and wet performance, have been replaced with plant‑based alternatives such as agricultural by‑products or used cooking oils.

The tyres also contain recycled materials, reducing reliance on primary source material to help alleviate resource consumption. Carbon black, a crucial filler in rubber compounds used to improve stability, strength, and durability, is recovered from end‑of‑life tyres and recycled steel is used to enhance handling and stability.

Bio‑based and recycled materials are generally more sustainable to obtain, more energy efficient to process, and easier to manage at end‑of‑life than virgin and fossil‑based materials such as synthetic polymers and silica obtained from conventional materials such as quartz sand, yet perform as well, combining environmental responsibility and high‑performance design.

Reuben Chorley - Sustainable Industrial Operations Director, JLR said: This is another example of how JLR is leading on sustainable design innovation in collaboration with its supply chain partners to deliver at scale, while reducing the environmental impact of our products.

Achieving a more sustainable composition without compromising quality and performance is a challenge because of the complexity of tyre design. But working closely with Pirelli and leveraging both company’s expertise in procurement and engineering, we have been able to deliver this industry first.

The new P Zero tyre also contains FSC™ (Forest Stewardship Council™) ‑ certified natural rubber and is a result of JLR’s on‑going collaboration with Pirelli. In another global first last year, JLR committed to roll‑out FSC™‑certified natural rubber tyres across its portfolio, to help ensure responsible management of natural rubber in its supply chain.

Similarly, all bio and recycled materials used will be third party certified to verify quantity and quality. The two companies have a shared vision to increase the use of recycled and bio‑based materials in their products, with an ambition to reach 100% for tyres in the future.

Update to Product Marking (UKCA/CE Recognition) Guidelines

Temple Quality Management Systems — 07/04/2025

You may be aware that on 1 October 2024, legislation came into force to continue recognition of EU requirements, including the CE marking for a range of products being placed on the GB market. This legislation is called The Product Safety and Metrology Regulation (Amendment) 2024 and applies to 21 regulations.

To provide industry with further clarity on how to make use of this approach, The Department for Business and Trade have provided new guidance that lays out what businesses can do to place their products on the GB market.

You can find links to these pages for further information below:

Policy paper: Continued recognition of EU requirements for conformity assessed marking
Guidance: Make use of recognition of EU requirements to place products on the GB market
Guidance: Product regulations and current approaches to product marking
Guidance: Using harmonised standards for placing CE marked products in Great Britain

Temple to deliver Fire Safety and Quality Practitioner apprenticeships

Temple Quality Management Systems — 31/07/2025

Temple Management Training, a premier provider of professional development and apprenticeships, today announced it has been successfully approved as a supplier to deliver two new, high-demand apprenticeship programmes: the Level 3 Fire Safety Advisor and the Level 4 Quality Practitioner.

This expansion of Temple’s portfolio directly addresses the growing industry need for certified professionals in the critical fields of health, safety, and quality assurance. The new programmes are designed to equip apprentices with the practical skills and theoretical knowledge required to excel in their roles and provide immediate value to their employers.

The Level 3 Fire Safety Advisor Apprenticeship is tailored for individuals who collaborate with organisations to minimise fire risk in straightforward premises, such as shops, offices, or industrial units with simple layouts.

The programme will train advisors to support businesses in maintaining fire-safe premises by providing expert guidance and education. Apprentices will also learn to identify when enforcement action is necessary and take the appropriate steps to ensure full compliance with safety regulations.

The Level 4 Quality Practitioner Apprenticeship is crafted to develop the capability and confidence needed to implement best-in-class Quality practices. Specifically designed for professionals working within a Quality function, it equips individuals with the advanced skills to meet contractual and regulatory obligations while systematically driving continuous improvement in customer and stakeholder satisfaction.

Bob Hughes, Managing Director, commented on the announcement: “This is a brilliant moment for Temple and a significant milestone in our growth. Securing approval for these apprenticeships aligns perfectly with our mission to provide industry-leading, relevant training that meets the real-world needs of UK businesses.

We recognise a critical skills gap in the market for competent professionals in both fire safety and quality assurance.

These programmes will not only empower individuals to build rewarding careers but also support businesses in creating safer, more efficient, and compliant workplaces. We are incredibly proud to be at the forefront of this vital training.”

Jaz Tanwar, Operations Director, added: “This is fantastic news, and we are thrilled to add the Fire Safety Advisor and Quality Practitioner apprenticeships to our offering. Our team has worked diligently to ensure these programmes are robust, practical, and deliver tangible results for both the apprentice and their employer.

The Level 3 Fire Safety Advisor will develop essential skills to protect people and property, while the Level 4 Quality Practitioner will empower individuals to become true agents of change, driving excellence within their organisations. We are excited to welcome our first cohorts and support them on their journey to becoming certified experts in their fields.”

Enrolment for the apprenticeship programmes is now open. Businesses interested in upskilling their workforce and individuals looking to advance their careers are encouraged to contact Temple Management Training for more information.

About Temple Management Training Ltd:

Temple Management Training Ltd is a UK-based training provider dedicated to delivering high-quality apprenticeships and professional development courses. The company offers CILT (UK) and CQI and IRCA certified training, empowering professionals and organisations to achieve excellence in ISO standards, risk management, compliance, and business improvement.

With a strong reputation for delivering accredited courses led by experienced practitioners, Temple supports individuals in advancing their careers and helps businesses embed best practices across their systems.

www.templeqms.com

Why ISO 19011 deserves a place in your Quality toolbox

Temple Quality Management Systems — 17/06/2025

Anticipating the next revision of ISO 19011

Many quality professionals are familiar with ISO 9001:2015 and are aware that an update is in progress, with publication expected in 2026. However, fewer realise that another key standard – ISO 19011, the guidance for auditing management systems – is also undergoing review. A new revision may be published as early as next year.

While the International Organisation for Standardisation (ISO) has issued over 25,000 standards globally, ISO 19011 holds particular significance. It provides a structured approach to auditing quality and other management systems – particularly for internal audits – and has been a critical yet underutilised resource since its introduction in 2002.

The Role of ISO 19011 in Internal Auditing

Historically, audits in manufacturing and other sectors were driven by external bodies – customers, regulatory agencies, or certification bodies – with objectives that often differed from those of internal audits. ISO 19011 was created to fill this gap by offering a dedicated framework for internal (first-party) and second-party audits, helping organisations design and implement effective audit programmes.

The guidance is centred around three core areas:

Audit programme management
The audit process itself
Auditor competence

Despite the breadth of ISO 19011, most training courses focus narrowly on the audit process, sometimes referencing audit principles but rarely addressing the equally vital aspects of audit planning or auditor capability. In many organisations, internal auditors are selected arbitrarily – sometimes simply sent for training with little consideration for their suitability. Yet ISO 19011 is clear: auditor selection should be based on defined personal behaviours, core competencies, and industry-specific knowledge.

Understanding Auditor Competence

Section 7 of ISO 19011 sets out key attributes required of auditors. These include:

Personal behaviours – integrity, objectivity, and the ability to communicate effectively
General knowledge and skills – understanding of audit principles and the organisation’s context
Industry-specific expertise – technical knowledge relevant to the processes being audited

For larger organisations, the standard also outlines the additional competencies needed for lead auditors who may be responsible for managing audit teams.

Competence is not a one-time achievement. ISO 19011 encourages ongoing development through continuous learning and periodic evaluation. It also highlights the importance of soft skills such as decision-making, critical thinking, and effective communication. After all, auditors often present findings that carry strategic significance, and must do so in a way that earns leadership’s trust and promotes action.

Audit Training: Gaps and Opportunities

Training formats for internal auditors vary widely – from brief online modules to extensive lead auditor courses. However, many of these focus on clause-by-clause breakdowns of standards or third-party certification processes, often overlooking soft skills and broader programme management.

Organisations should look beyond basic training and consider how best to equip auditors with the full spectrum of skills needed to perform meaningful, value-added audits.

Effective Audit Programmes: Moving Beyond the Calendar

A common misconception is that audit programmes must follow a fixed annual calendar. In fact, ISO 19011 allows for more dynamic scheduling. Audit frequency should be driven by:

Organisational changes
Risk levels
The importance of specific processes
Results of previous audits

For example, after securing a new customer contract, it may be prudent to audit the relevant processes more frequently during initial implementation to ensure that requirements are being met. ISO 9001 itself highlights the importance of responding to change and managing risk – both of which should influence the internal audit schedule.

Aligning with Management Priorities

One of the most effective ways to design a meaningful audit programme is to start by consulting with senior management. Their insight into which processes are most critical for meeting customer, regulatory, and business objectives ensures that audits are aligned with what truly matters. This also increases the likelihood that audit findings will be acted upon and drive improvement.

What’s Next for ISO 19011?

While we await the next revision of ISO 19011, significant changes are not anticipated. Nonetheless, organisations should prepare to review and adopt the updated guidance when it becomes available. It remains one of the most comprehensive resources for auditing management systems, yet many overlook its full potential.

For organisations aiming to move beyond routine, checkbox-style audits and develop a robust internal auditing function, ISO 19011 is an invaluable tool. At Temple QMS, we recommend that clients consider it not just as a reference document, but as a strategic enabler of continuous improvement.

Get ready to make ISO 19011 your go-to guide for internal auditing excellence.

The benefits of ISO 9001 certification

Temple Quality Management Systems — 04/02/2025

The ISO 9001 quality management standard is widely known and respected. This is evidence of a company taking great care of its products and services.

But why are millions of businesses around the world interested in implementing this certification? ISO 9001 certification has ten benefits that can positively impact your business.

1. Increased likelihood of winning contracts

Businesses can benefit from ISO 9001 certification by securing public and private partnerships. Public sector tenders benefit from ISO 9001 certification because it signals well-run and credible businesses, eliminating the need for extensive due diligence. As well, many private sector companies have made ISO 9001 certification a requirement for their suppliers. A commitment to quality signifies that the business takes quality seriously.

2. Increased customer satisfaction

It is crucial to track customer satisfaction and address any issues raised as part of the ISO 9001 standard. By obtaining and maintaining ISO 9001 certification, companies demonstrate that they are serious about this issue.

3. Problems with products or services are reduced

Businesses with ISO 9001 certification are better prepared for unexpected events. There are processes in place, for instance, to make sure that problems are dealt with efficiently and don't recur in the future.

4. A better management system

Business success depends on appropriate analysis and reporting. As a result of the ISO 9001 standard, businesses are able to get this right.

5. Business practices that are more consistent

Implementing the standards will ensure consistency that benefits everyone, including customers. By ensuring that business processes are common and understood, employees won't have to think about what to do, or even make things up, as they will be clearer about their tasks.

6. A higher level of employee satisfaction and job security

In a well-defined and clearly managed organization, employees experience greater job satisfaction and feel more secure about their jobs.

7. Cost reductions

Lower insurance premiums can be achieved and maintained by achieving ISO 9001 certification. Due to effective processes and controls, insurers consider these businesses to be risk-reduced.

8. Improved business processes

Despite the fact that businesses don't want unnecessary paperwork, many are burdened with it. ISO 9001 demands that business processes be streamlined due to its discipline. It is important that processes are regularly reviewed so they don't become sluggish.

9. Maintaining a continuous improvement process

A good quality management system provides a solid foundation for continuous improvement.

10. Improvements in all areas of the business

As a result of the nine benefits outlined above, business performance and profits are improved overall.

We are certain you would see many of these benefits once you've implemented the ISO9001 certification requirements once you've considered ISO 9001 certification for some time or are researching it for the first time.

If you are unsure what is required to attain certification or need help achieving it, please contact us for a no-obligation discussion. You can find a solution that meets your needs, no matter what level you are at.

Alternatively, join Temple for an online event during the West Midlands Business Festival.

Event:
Achieving Success With Business Standards

10th March | 10am-11am GMT | Virtual Event
Presenters: Jaz Tanwar and Ian Hughes
Practical guidance and actionable strategies to help businesses implement ISO standards.

Book your place

The only problem is that with over 100,000 of them - and more published every year - knowing which standard to implement can be a challenge.

To help you know where to start, join Temple for an online event. They will help guide you to find the right standards for your organisation, so you can establish a robust framework for success.

At the end of the event, you’ll leave with a clear roadmap for starting your ISO journey. You'll feel empowered to improve efficiency, compliance, and overall business performance.

A New Collaborative Training Course for Business Growth

Temple Quality Management Systems — 24/04/2025

In an era where success increasingly depends on strategic alliances, collaboration has become more than just a buzzword—it’s a critical business skill.

The Institute of Collaborative Working (ICW), in partnership with Temple QMS, is proud to launch a transformative 1-day online training course designed to equip professionals with the tools, insight, and confidence to thrive in collaborative environments.

The next course available will be held on 26th June 2025.

Why Collaboration Matters Now More Than Ever

Whether it’s co-developing new products, streamlining supply chains, or tackling shared challenges, effective collaboration is now a key driver of innovation, value creation, and sustainable growth. Businesses that invest in building strong, collaborative partnerships consistently outperform those that go it alone.

This new course offers a practical, insightful look at how collaboration can deliver measurable value to your organisation. It focuses on the real-world requirements of partnership working—something that can no longer be treated as optional in today’s interconnected landscape.

What the Course Covers

Delivered through a blend of engaging presentations and interactive activities, this course provides a deep dive into the essential elements of effective collaboration. By the end of the day, participants will walk away with a well-rounded understanding of:

The foundations and advantages of collaborative working
How to deliver real, shared value in partnerships
Conducting internal reviews and assessments
Techniques for managing critical relationships
The principles of ISO 44000, the international standard for collaborative business relationships

These skills are not only useful—they’re essential for organisations aiming to future-proof their operations, improve stakeholder engagement, and gain a competitive edge.

Who Should Attend?

This course is tailor-made for multidisciplinary professionals who contribute to or manage collaborative initiatives. Ideal attendees include:

Project managers
Engineers and development professionals
Sales and quality teams
Internal and external auditors
Anyone involved in or supporting cross-functional or cross-organisational collaboration

Even those new to the topic will benefit, gaining the language, principles, and confidence to engage more effectively with collaboration-focused projects.

Future-Proof Your Business: Book Your Place Today

With increasing emphasis on partnerships in everything from procurement to product innovation, now is the time to invest in your team’s collaborative capabilities.

This 1-day online course is not just training—it’s a stepping stone towards building better relationships, reducing friction in joint projects, and ultimately creating more value across the board.

Ready to take the next step?

Course details: https://templeqms.com/icw-sme-collaborative-training

Don’t let your organisation fall behind. Equip your team with the skills to lead, adapt, and grow—collaboratively.

Temple Quality Management Systems

Temple joins West Midlands Business Festival for online event

Event: Achieving Success With Business Standards

Report: UK manufacturing can benefit from AI

Knowledge and Skills Challenge

Introducing the EU's new cyber security obligations for businesses

1. How does the EU plan to achieve its goals?

2. Which legal acts are there?

3. How is regulation implemented?

Need some guidance?

Navigating the Future of Health & Safety: Key Insights from RS Group’s 2025 EHS Report

A Challenging Outlook for EHS Confidence

Mental Health: Still Falling Short

The Maturity Gap in PPE Management

Strategy Priorities & Compliance Measures

The Sustainability Dilemma

Gender Inclusivity in PPE: More Work Needed

Final Reflections from Industry Leaders

Beyond the Price Tag: Unpacking the True Cost of Quality (COQ)

Listen on these players:

Integrating climate change considerations into Internal Audits

Understanding the Challenge

Linking to ISO Management Standards

A Climate-Focused View of Infrastructure

Training Auditors to Address Climate Change

Preparing for the Future

Final Thoughts

Overconfidence in Cyber Resilience is Leaving Manufacturing Vulnerable, Report Warns

How to Identify and Manage Workplace Health and Safety Risks

Understanding the Nature of OHS Hazards

Common Health and Safety Risks

Types of Workplace Hazards

The Real Cost of Poor OHS

How to Reduce OHS Risks: A Practical Approach

Strengthening Risk Management Through ISO Standards

Tailored Solutions for Organisations of All Sizes

Spring Budget 2025: Implications for UK Manufacturing and Defence

Cyber Governance Code of Practice

What is the Cyber Governance Code of Practice?

How do standards add value to your organisation?

Why is it beneficial for my business to have standards?

Does my industry have any relevant standards?

What is the average time it takes for a standard to be adopted?

Do I need standards in my business?

Does my business have to be completely restructured?

Standard purchases are expensive, right?

Is it necessary to involve many people within my business when implementing standards

Am I required to get accredited?

When I become accredited, what happens?

Is your supplier network putting you at risk?

One weak link can break the chain

The hidden impact of a third-party breach

Understanding and managing third-party risk

So what can you do? It starts with visibility and ends with accountability.

Supply chain security is a shared responsibility

Why ISO 27001 matters

Identifying OHS hazards and managing risks

The Hidden Cost of Workplace Risks

Identifying Hazards, Reducing Risk

ISO 45001: More Than Just a Tick Box

Training and Consultancy Tailored to You

Build a Resilient, Safer Future

£40m funding available for automotive technology businesses

Key competition dates:

Achieving the status of Chartered Quality Professional and CQI Member

About the CQI

ISO 9001:2026 – Will Staff Need Additional Training?

A Brief Look Back

So, Will Training Be Required?

Managing the Transition: A Step-by-Step Approach

Timing the Transition

Final Thoughts

One million and counting as JCB marks major Backhoe milestone

Building business excellence with ISO 9001 quality objectives

Aligning Quality Objectives with Business Strategy

Applying the SMART Framework – The Temple Way

Avoiding Common ISO 9001 Pitfalls

Monitoring, Review, and Continuous Improvement

Your ISO 9001 Partner in Performance

Let’s build your ISO 9001 success story together.

Event:
Achieving Success With Business Standards