ISO 27001 vs SOC 2: What’s the Difference? with Sam Mather and Rob Hall | Part 1

What does an ISO 27001 or SOC 2 assessment actually involve, and how can organisations prepare for it? In Part 2 of this two-part discussion, we take a closer look at the assessment process for both ISO 27001 and SOC 2. Sam Mather from Assent and Rob Hall from Tempo Audits explore what auditors look for, the differences between an ISO 27001 audit and a SOC 2 assessment, and the role of evidence and preparation. The conversation also covers SOC 2 Type 1 and Type 2 assessments, how organisations can prepare for a successful audit or certification, common challenges businesses face, and why planning ahead can make such a difference. Originally recorded as part of an Assent Risk Management webinar, this conversation has been adapted into a two-part episode of Exploring Standards. 🎧 Listen to Part 2 to hear practical advice on preparing for ISO 27001 and SOC 2, avoiding common pitfalls, and approaching your assessment with confidence. In this episode: What auditors look for during ISO 27001 and SOC 2 assessments The differences between the ISO 27001 audit and SOC 2 assessment process SOC 2 Type 1 vs Type 2 How to prepare for a successful audit or certification The importance of evidence and preparation Common challenges when implementing ISO 27001 and SOC 2 Practical advice for organisations preparing for assessment Contact Assent: Website: www.assent1.com Email: [email protected] Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement   Contact Rob: www.tempoaudits.com https://www.linkedin.com/in/robjshall/

ISO 27001 and SOC 2 are two of the most in-demand information security frameworks, but how do they actually compare, and how do you know which one your organisation needs? In this episode of Exploring Standards, host Jess is joined by Sam from Assent Risk Management and Rob Hall from Tempo Audits to break down the similarities and differences between these two frameworks. They cover the shared risk-based approach and overlapping controls both frameworks require, the key methodology differences (ISO 27001's management-system approach vs. SOC 2's focus on control effectiveness), and why customers request one, the other, or both, from industry mandates and customer location to commercial and cost considerations like SOC 2's trust services criteria. This is part one of a two-part series adapted from a live Assent Risk Management webinar. Stay tuned for part two, where the conversation continues. Contact Assent: Website: www.assent1.com Email: [email protected] Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement   Contact Rob: www.tempoaudits.com https://www.linkedin.com/in/robjshall/  

In this episode of Exploring Standards, host Jess is joined by Derek Geyer from DHG Quality Consultants to break down BS 99001, the quality management standard built specifically for the construction and built environment sector. Derek explains why ISO 9001, while valuable, simply wasn't designed for the complexity of construction, with its temporary teams, long supply chains, changing designs, and overlapping trades. BS 99001 steps in to fill that gap, offering a practical, project-specific framework that reflects how construction projects actually work. In this episode, we cover: What BS 99001 is and how it sits alongside ISO 9001 Who needs it, from main contractors to design consultants and clients How it's becoming a differentiator in tendering and PQQ processes The biggest gaps in traditional quality management when applied to construction Why the built environment needs its own tailored approach Key principles that make BS 99001 different, from project-specific quality planning to evidence, traceability, and interface management The role of collaboration across contractors, consultants, and suppliers Practical improvements organisations see when it's implemented properly Common misconceptions and challenges when first adopting the standard Guest: Derek Geyer, DHG Quality Consultants Derek Geyer has 30 years of experience in the construction industry. Having worked across site, office, and project management roles, Derek spent the last decade focusing exclusively on quality in construction, conducting gap analyses, supporting organisations through standard implementation, and working with those involved in the BS 99001 pilot scheme. DHG Quality Consultancy Website: https://www.dhgqualityconsultancy.com/   Derek LinkedIn: https://www.linkedin.com/in/derek-geyer-cqp-mcqi-89b3b4124/ Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess sits down with Kit Wells, lead assessor for ISO 9001, 14001, 45001, and 50001, and an implementer, auditor, and trainer for ISO 55001, to demystify asset management and explore how this standard is driving real business results across industries. Kit breaks down what ISO 55001 actually means in practice, from creating a Strategic Asset Management Plan (SAMP) that links company-wide objectives right down to individual operational tasks, to shifting organisations from reactive firefighting to proactive, risk-based maintenance. In this episode, you'll hear: What ISO 55001 is and why asset-heavy industries are adopting it The power of the SAMP and why Kit wishes every standard had one Common implementation challenges and the reason implementations fail How ISO 55001 integrates with ISO 9001, 14001, 45001, and beyond A real-world example of how better maintenance scheduling saves significant Practical first steps for organisations starting their 55001 journey   Contact Kit: https://littlegreenconsulting.com/ https://www.linkedin.com/company/little-green-consulting-limited/   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess sits down with Tony Allen, Chief Executive of the Age Check Certification Scheme, to unpack the world of age assurance and the international standard ISO 27566. Tony explains the critical difference between age verification, age estimation, and age inference, and why the rise of the internet has transformed what was once a straightforward check at a shop counter into a complex, global challenge. From protecting children accessing content online to ensuring privacy and avoiding state surveillance, the conversation covers the competing pressures organisations face when implementing effective age assurance systems. They also dig into ISO 27566, a three-part standard developed by ISO, IEC, and ITU, exploring its five core characteristics and how it gives organisations a framework to implement trustworthy, technology-neutral solutions. Tony shares what the certification process looks like in practice, who it's designed for and why independent certification carries far more weight than self-declaration. Key topics covered: The history of age assurance from the 1836 Gin Acts to the modern internet Age verification vs. age estimation vs. age inference The global regulatory landscape driving online safety requirements What ISO 27566 requires and why Part 1 is freely available How the Age Check Certification Scheme tests and certifies products Where age assurance standards are headed next Contact Tony: Linkedin: https://www.linkedin.com/in/tonyallenctsp/   ISO 27566 Standard: https://www.iso.org/standard/88143.html   Age Assurance Certified Providers: https://accscheme.com/registry/age-assurance/    ISO 27566 Certification Process: https://accscheme.com/services/iso-27566-1-certification/    Online calculator for ISO 27566 audit effort: https://accscheme.com/iso-iec-27566-1-audit-effort-calculator-accs/    Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

In this episode of Exploring Standards, host Jess is joined by Rob Clements and Danny Lee to discuss the launch of Vaelo Aerospace and the growing opportunities within the aerospace and defence sectors. The conversation explores why Vaelo was created, the gap it aims to fill in the consultancy market, and why aerospace requires a specialist approach to quality, compliance, and supply chain management. Rob and Danny share their backgrounds in standards, aerospace, and compliance, and explain how organisations can position themselves to become trusted suppliers within the aerospace and defence supply chain. The episode also introduces the key aerospace quality standards, including AS9100, AS9110, and AS9120, and discusses how these standards help manufacturers, maintenance organisations, and distributors demonstrate capability, consistency, and trust. The discussion covers the importance of risk management, supply chain assurance, traceability, cybersecurity, and supplier approvals in a sector where quality and safety are critical. With significant investment planned across the UK defence and aerospace industries, Rob and Danny explain why now is an important time for organisations to consider entering the sector, and how specialist support can help businesses bridge the gap between their current capabilities and the requirements of major aerospace and defence customers. Whether you're already operating in aerospace, looking to expand into the sector, or simply interested in the role standards play in highly regulated industries, this episode provides valuable insight into the opportunities and challenges facing the aerospace supply chain today.   Contact Vaelo LinkedIn: https://www.linkedin.com/company/vaelo-aerospace/ Website: https://www.vaeloaerospace.com/ Email: [email protected]  

In this episode of Exploring Standards, host Jess is joined by Rob Clements, CEO and Director of Assent Risk Management, for a fascinating discussion on how ISO consultancy has evolved over the past 20 years. Rob shares how he entered the industry from an IT background during the rise of ISO 27001 and information security management systems, a very different route from the traditional quality management pathway. Together, Jess and Rob explore the journey from paper-based management systems and ring binders to shared drives, specialist software platforms, and remote collaboration tools that have transformed the way organisations implement and maintain ISO standards. The conversation also examines how client ownership has changed over time, with businesses now taking a much more active role in managing their own compliance systems. Rob discusses the growing trend of outsourced compliance functions, including Data Protection Officers and Quality Managers, and the value they can bring to organisations. Finally, the episode explores the role of artificial intelligence in ISO consultancy, from the productivity gains and efficiencies it can deliver to the risks of over-reliance. Rob shares why, despite rapid technological advances, human expertise, judgment, and experience remain essential to achieving meaningful compliance and successful certification.   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards is a recording of a webinar hosted by Assent Risk Management in partnership with ISOQAR, exploring the upcoming changes to ISO 14001:2026 and what organisations need to know to prepare. Featuring Robert Clements from Assent Risk Management and Natalie Walker from ISOQAR, this session brings together both consultancy and certification perspectives to cut through the speculation and focus on what is actually changing within the standard, what those changes mean in practice, and how organisations can position themselves for a smooth transition. The conversation covers the key updates expected in ISO 14001:2026, how certified organisations can start preparing now, and what businesses considering certification should be thinking about before beginning implementation. The speakers also share insights into how certification bodies are likely to approach the transition process and what organisations can expect during the transition period. The conversation covers the key updates expected in ISO 14001:2026, how certified organisations can start preparing now, and what businesses considering certification should be thinking about before beginning implementation. Robert and Natalie also share insights into how certification bodies are likely to approach the transition process and what organisations can expect over the coming years. Whether you already hold ISO 14001 certification or are exploring environmental management systems for the first time, this episode provides practical guidance to help you understand the direction of travel and prepare with confidence. Recorded as part of a live webinar hosted by Assent Risk Management and ISOQAR, the session also includes audience questions and expert insights into the future of environmental management and ISO 14001 certification.   Contact ISOQAR: https://isoqar.com/ ISOQAR 14001 Training: https://isoqar.com/training/iso-courses/ ISOQAR LinkedIn: https://www.linkedin.com/company/isoqar/   Digital.Lorators Free ISO 14001:2026 Awareness Course: https://digital.lorators.com/courses/iso-140012026-awareness-course/   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk YouTube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards is Part 2 of a live recording from the in-person event, “ISO 9001: Now and Into the Future,” hosted by Assent Risk Management in collaboration with Interface NRM. Featuring Rob Clements from Assent Risk Management and Ryan Stevens from Interface NRM, this session continues the discussion from Part 1, bringing together both implementation and certification perspectives on one of the world’s most widely used standards. In Part 1, the conversation explored what ISO 9001 is, why it remains widely adopted across the UK, and its role in supply chains and public-sector tenders. It also covered the upcoming 2026 revision, including key timelines and expected updates, and why organisations should view the changes as an evolution rather than a major overhaul. In this episode, the focus shifts to real-world implementation. The speakers discuss the most common audit findings and pitfalls organisations face, insights from internal audit data across the last 12 months, and practical challenges such as document control, training records, and customer feedback in B2B environments. The episode also walks through the ISO 9001 certification process and what the transition to the 2026 revision is expected to look like in practice, including preparation steps and transition timelines. The discussion closes with practical reassurance for certified organisations, emphasising that most businesses already have strong foundations in place, and that the upcoming changes are expected to be manageable with the right preparation. Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk YouTube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement

This episode of Exploring Standards, is a recording from an in-person event, “ISO 9001: Now and Into the Future,” hosted by Assent Risk Management in collaboration with Interface NRM. Featuring Rob from Assent Risk Management and Ryan from Interface NRM, this session brings together both implementation and certification perspectives on one of the world’s most widely used standards. The episode begins with a clear breakdown of what ISO 9001 is, why it remains so widely adopted across the UK, and the role it plays in supply chains and public sector tenders. From there, the conversation turns to the upcoming 2026 revision, including timelines, expected updates, and why organisations should see this as an evolution rather than a major overhaul. Key themes include the growing focus on quality culture and ethics, new climate-related requirements, clearer separation of risks and opportunities, and a more structured approach to change management. The speakers also cover the core requirements of ISO 9001 from a practical, consultancy perspective, along with reassurance and advice for organisations already certified. Stay tuned for part two, where the discussion continues.   Connect with Assent: LinkedIn: https://www.linkedin.com/company/associate-enterprises-ltd-t-a-assent/ Facebook: https://www.facebook.com/assentuk Youtube: https://www.youtube.com/channel/UCWw6ny-YyfkxdGm7ig4yFoQ Instagram: @assentriskmanagement