Services
ISO Management Systems & Regulatory Compliance
From ISO 9001 and ISO 27001 to ISO 14001, ISO 45001, and ISO 50001 - practical, hands-on compliance consultancy built around what your business actually needs.
Expert ISO & Compliance Consultancy Without the Full-Time Overhead
Achieving and maintaining ISO standards and regulatory compliance is about more than just ticking boxes, it is about building resilient, efficient management systems that drive sustainable business growth. At Elmar Risk Management, we help small and medium-sized enterprises design, implement, and audit management and compliance frameworks across information and cyber security, quality, health and safety, environmental impact, and energy.
Most SMEs either over-engineer their approach, pursuing unnecessary standards and struggling with misaligned compliance or under-invest, assuming they are too small to face risk. Neither approach works. Elmar's approach is entirely proportionate: we evaluate what your actual risk profile demands, establish the right controls, and embed the ongoing processes needed to keep them working effectively.
Peter Berry holds a Regulatory Compliance Officer Level 4 qualification alongside ISO Lead Auditor certifications across ISO 27001, 9001, 14001, 45001, and 50001. With extensive experience building and managing security and compliance programmes within major UK regulated organisations, Elmar delivers high-level expertise directly to your business, without the overhead of a full-time hire.
What We Cover
Focus areas
Our ISO and compliance work spans the full lifecycle - from baseline assessments through certification and into long-term programme management.
Integrated Management Systems
Streamlined audit readiness and system integration combining ISO 27001 (Information Security), ISO 9001 (Quality) and ISO 45001 (Health & Safety) under a single, coherent operational framework tailored to your business.
Energy & Environmental Standards
Specialised implementation and audit support for ISO 14001 (Environmental Management) and ISO 50001 (Energy Management), helping heavy industry and utilities track baselines, reduce footprint, and ensure regulatory alignment.
Cyber Essentials & Technical Standards
Structured preparation and gap analysis for UK Government-backed Cyber Essentials and Plus certification, covering boundary firewalls, secure configurations, access control, and patch management.
Supply Chain Security & Vendor Risk
Robust supplier due diligence frameworks, third-party risk questionnaires, and tailored contract clauses to help you manage compliance and security risk across your extended vendor network.
Independent Internal Auditing
Objective, professional internal audit services to test your controls, track corrective actions, and prepare your team for external assessment with confidence rather than anxiety.
Security Awareness & Culture
Tailored staff training, interactive workshops, and management briefings designed to embed a company-wide culture of compliance, turning your people into active participants across safety, quality, and security.
How to Work With Us
Engagement options
Two ways to access our ISO and compliance expertise - structured around your business's current stage and budget.
Retainer
Outsourced Compliance & ISO Management
Ongoing expert oversight - no full-time hire needed.
We act as your embedded Compliance and ISO function. Includes continuous risk monitoring, surveillance & audit prep, management review support, and a dedicated point of contact for day-to-day queries.
- Dedicated named consultant
- Monthly or quarterly review cadence
- Continuous risk register maintenance
- Annual internal audit programme
- Surveillance & recertification preparation
- Staff awareness sessions (on request)
Fixed-Fee Project
ISO Project Implementation
A clear scope, a defined output, a single invoice.
Scoped project engagements for organisations pursuing initial certification or remediating an identified gap. Deliverables, timelines, and fees are agreed upfront - no surprises.
- Gap analysis & readiness assessment
- Full policy and procedure suite
- Risk assessment & Statement of Applicability
- Internal audit & corrective action plan
- Management review facilitation
- Certification body liaison support
Consultancy Support
Building your internal compliance and management capability
Not every organisation needs a managed outsourced function. If your team wants to manage your ISO standards and compliance independently, our Consultancy Support model gives you the expert foundation and guidance to do it confidently.
We provide targeted support only when you need it, with no ongoing contract required. From initial baseline assessments through to ISO certification, you get guidance at every step while building the internal skills and confidence to maintain compliance independently over time.
The goal is a strong, lasting foundation, the right management frameworks and processes from the beginning, and a team that is genuinely equipped to manage compliance day to day.
Expert help at the start while your team runs day-to-day operations internally
Targeted support only when you need it, with no ongoing contract required
Clear guidance across all ISO standards and frameworks (from quality and safety to security)
Staff equipped to manage compliance and management systems with confidence
The right frameworks and processes built in from the beginning
A strong, resilient foundation that keeps you compliant as you grow
The Certification Journey
What to expect from start to certification
Whether you are pursuing ISO 27001, ISO 9001, ISO 14001, ISO 45001, or ISO 50001, the certification journey follows the same structured path. Elmar guides you through each stage.
- 01
On-site initial assessment and gap analysis
We assess your current position against the standard's requirements, map existing controls, and produce a prioritised action plan.
- 02
Bespoke documentation preparation
We prepare policies, procedures, and documented information that reflect how your organisation actually operates, not off-the-shelf templates.
- 03
Hands-on implementation and team mentoring
We work alongside your team to embed the required processes and build the skills to maintain them independently.
- 04
Rigorous internal audit
A full internal audit against the standard before the external auditor arrives, finding and addressing issues in advance.
- 05
Certification audit and on-site support
We prepare you thoroughly for Stage 1 and Stage 2 audits and are available to support you on the day.
Related Insights
Ready to start?
Talk to us about your ISO and compliance needs
Whether you are pursuing first-time ISO certification, Cyber Essentials, or need ongoing compliance management, get in touch for a no-obligation conversation.
Book a Free Introductory Call