Ask Gareth. Q&A Community.
Benchmarking, accreditation and compliance requirements should not leave you second-guessing your next step. Ask Gareth brings professionals, consultants, compliance managers, assessors, sector specialists and organisations together in one open, moderated community where practical questions receive credible answers, real experience is shared and complex requirements are translated into clear, useful guidance.
Whether you are working towards accreditation, meeting sector-specific standards, responding to regulatory expectations, managing assurance requirements or learning from others in your industry, Ask Gareth helps you find clarity, contribute knowledge and take part in informed discussion across a wide range of sectors.
A practical question, a fast start, then professional judgement
Ask Gareth is a moderated professional community, not an advice service.
Ask a practical question
Describe your real situation — standard, sector and what you have already tried.
Get an AI-assisted starting point
An initial response helps frame the issue quickly. It is a starting point, not a final answer.
Contributors add judgement
Moderators, contributors and sector specialists review, improve or challenge the response.
Follow topics and save discussions
Register to follow topics that matter to your work and keep useful threads to hand.
Three ways to participate
Ask a practical question
Describe your real situation and get moderated, practical input from professionals who have faced it.
Ask a questionJoin the conversation
Register to follow topics that matter to your work, save discussions and comment on published threads.
Join the conversationShare professional experience
Vetted contributors answer questions and publish articles. Editorial review always applies before publication.
Apply to contributeWhere the conversation lives
ISO Management Systems
Practical guidance and peer discussion across the mainstream ISO management system standards.
UK Accreditation & Conformity Assessment
How UKAS accreditation, certification, inspection, testing and verification actually work in practice.
AI Governance & Risk
ISO/IEC 42001, AI risk management, EU AI Act readiness and responsible AI governance.
Health & Social Care Compliance
CQC registration, regulated activities, governance and evidence for health and social care providers.
Cyber, Data & Assurance
Cyber Essentials, SOC reporting, information security and supplier/SaaS assurance.
Latest articles
Process mapping as a business improvement tool for management system
A practical guide to process mapping for ISO, explaining how clear process maps help SMEs define responsibilities, manage risks, evidence controls, support audits and improve business performance.
ISO 9001:2026 revision — what quality managers should watch now
The next edition of ISO 9001 is expected in 2026 (ISO/FDIS 9001 stage). We unpack the likely structural changes, risk-based thinking updates and what early preparation looks like for certification and surveillance audits.
UKAS, ISO/IEC 17021-1:2022 and the conformity assessment transition
Accreditation bodies and certification bodies are navigating the 17021-1:2022 transition. Here is what the changes mean for audit programmes, competence records and impartiality arrangements.
AI governance readiness: ISO/IEC 42001 and the EU AI Act in practice
AI systems are moving from experiment to operation. We compare ISO/IEC 42001, AI risk management frameworks and the EU AI Act obligations that organisations are already being asked about.
Moderated, credible, transparent.
Every question and answer is moderated. Contributors are vetted. Sponsored content is clearly labelled. General information only — not certification, accreditation or regulatory advice.
Recent questions from the community
Real questions from members and contributors. Answers are moderated.
- other·1 answer·AnsweredSOC 1 & SOC 2
Has anyone got ideas on SOC1 & SOC2 documentation and implementation . I need to support a new client on this. It's not big thing in the UK but catching up. can anyone help
- iso·1 answer·AnsweredISO 27001 Management System Documentaion
I am currently developing ISO27001 management system and need help with What should be in an incident response plan?
- other·1 answer·AnsweredProcedures
I'm looking to develop a dynamic procedures platform for a wealth management firm that has recently completed an acquisition and is currently undertaking a large-scale KYC refresh programme. What is the best approach to managing the KYC refresh
- construction·1 answer·AnsweredSmart home installation query
What UK electrical certifications or which smart home ecosystems are best to specialise in for beginners?
- iso·1 answer·AnsweredISO Standards?
Can you please explain ISO standards?