Blog & Insights
Practical notes on ISO certification, risk and compliance for Kenyan and East African organisations.
ISO 9001 vs ISO/IEC 27001
ISO 9001 or ISO/IEC 27001: which should your organisation pursue first?
A practical way to decide between quality management and information security certification when you can only start with one.
Read more
Tenders & procurement
Why Kenyan tenders are asking for ISO certification — and how to get ready in time
What procurement teams are actually checking for, and the fastest realistic timeline to get certified before a bid deadline.
Read more
Data protection
Do you need a Data Protection Impact Assessment? A quick test for Kenyan businesses
A plain-language guide to when the Data Protection Act requires a DPIA, and what the assessment actually involves.
Read more