ISO in plain language.
What you need to understand before spending a peso on certification. Seven guides and a glossary, written with an auditor's judgement and with concrete examples. Free, no sign-up.
What an ISO standard is (and is not)
Standard, certificate, accreditation, ICONTEC, ONAC, Stage 1 and 2: who is who in an ISO certification and what you actually buy when you certify.
9 minClauses 4 to 10, explained with a blinds factory
The harmonized structure shared by ISO 9001, 27001, 27701 and 42001, clause by clause, with examples from the test company, a fictional SME in Pereira.
7 minWhat happens in the audit: Stage 1, Stage 2 and the findings
The ISO audit from the inside: what Stage 1 reviews, what Stage 2 samples, how a nonconformity is written and what separates a major from a minor.
6 minHow a risk is assessed, step by step
Likelihood, impact, controls and residual risk explained with a worked cybersecurity example, in the order ISO/IEC 27005 asks for. No hidden formulas.
7 minISO 9001:2026: what changes and what to do if you hold 2015
The substantive changes in ISO 9001:2026 clause by clause, the transition dates from 2015, what the standard does not require and what to do in your case.
7 minColombia's public-sector risk guide, version 7, explained
How Colombia's Función Pública guide for public entities calculates risk: two impacts, likelihood by exposure and cumulative residual risk.
7 minHow to build the ISO 27001 risk matrix
What ISO/IEC 27001 requires on risk (6.1.2, 6.1.3, 8.2 and 8.3), eight steps for an SME, the minimum columns of the register and what the auditor checks.
The words the auditor uses.
33 terms explained in one or two sentences, without copying the standard.
When you want to go from reading to doing.
The Ark of ISO builds the system with you, clause by clause, with the same clarity as these guides.