deGRANDSON Global Blog | Dr John FitzGerald

News and Commentary on ISO Management System Standards

Dr John FitzGerald

Director & Founder of deGRANDSON Global. Spent 15 years in the manufacturing industry and 25 years training, consulting & auditing management systems

How to Choose QHSE Courses for ISO 9001, 14001, 45001 in 2026

ISO 9001, ISO 45001, ISO 14001, Other Topics

Choosing the right QHSE course can feel overwhelming when you're faced with multiple standards (ISO 9001, ISO 14001, ISO 45001) and different auditor pathways (Internal Auditor, Lead Auditor, Lead Implementer). deGRANDSON Global makes this decision easier by offering structured, self-paced courses that map directly to your career goals and compliance requirements.

17 May 2026

When is a Calibration Certificate, in fact, a Verification Certificate?

ISO 17025

When a certificate does not show an ISO 17025 Accreditation logo, a Calibration Certificate can be difficult to check. And sometimes it's as if the Calibration Laboratory were trying to confuse you! ISO 17025:2017, which sets out general requirements for the competence of testing and calibration laboratories, has in recent years become the 'new normal' for laboratories offering reliable testing ...

12 May 2026

ISO 13485 Consultancy: Be a successful MDMS Consultant

ISO 13485

Could you make a successful career in Medical Device Management Consulting? What ISO 13485 training is needed? Dr John FitzGerald writes ... "Having worked for 28 years as a management system consultant, I've learned a lesson or two (including some bitter ones) on setting up and running a successful management consultancy business. So I'd like to share my experience with you in this article. This ...

05 May 2026

Why ISO 21001 and not ISO 17024 or EXEMPLAR or IRCA Accreditation?

FDA QMSR and ISO 14971: What to do about Risk Management

ISO 13485, ISO 14971

Don't believe everything you read about ISO 14971! The FDA's 'Medical Devices; Quality System Regulation Amendments' website explicitly states: All sections of ISO 13485 apply to device manufacturers. While there is much mention of 'incorporating by reference' and many misguided interpretations of that phrase, don't let anyone mislead you. To reiterate, the FDA's website explicitly states that ...

28 Apr 2026

Correction, Corrective Action and Preventive Action explained

ISO Standard Implementation

Badly written Corrective Action Clauses in ISO Management System Standards add to the confusion. Correction, Corrective Action, and Preventive Action (CCAPA) are essential management systems components that help organizations identify, address, and prevent issues to ensure ongoing compliance and improvement. And all three expressions are defined and explained in this Post.

23 Apr 2026

QHSE, HSEQ, SHEQ, IMS explained

ISO 9001, ISO 45001, ISO 27001, ISO 14001

These are commonly used terms, but they have no official standing So, where are they used, and what is their significance when you wish to be an Auditor certified to more than one ISO Management System Standard?

21 Apr 2026

ISO 27001, ISO 27701 and GDPR: a natural combination

ISO 27001, Data Protection

In 2018, many organizations, not only those based in the EU, spent much time and money on compliance with the General Data Protection Regulation (GDPR). But what actions should we take now to ensure ongoing compliance? It's not enough to have policies and procedures to demonstrate compliance with the requirements. If there is a data breach or similar event, regulators will challenge you to ...

16 Apr 2026

ISO 45001 Risk Assessment & Risk Treatment Tools

ISO 45001

You'll need OH&S Risk Management Methods & Tools Unlike ISO 9001, the Occupational Health and Safety Management System (OHSMS) Standard requires the application of OH&S Risk Management Methods in Clause 6.1. So, risk-based thinking alone does not meet requirements. Formal and documented Risk Assessment followed by Risk Treatment is required for compliance.

15 Apr 2026

ISO Auditor Competence: who decides?

ISO Auditing

Your ISO Auditor Certificate doesn't make you competent Being on a professional ISO auditor register isn't enough either Competence is defined as the ‘ability to apply knowledge and skills to achieve intended results.’ And so it is with ISO Auditor Competence. Your Lead Auditor Certificate alone does not ensure competence. Nor, when competent, do you suddenly become incompetent three years after ...