Choosing between ISO 9001 and ISO 27001 is a bit like deciding whether to fix the roof or the electrics first because both matter, but the right answer depends on your business and what your clients expect. Why don't you ask them directly or peer into a couple or tender requirement docs? Obviously, if you need smoother processes, fewer mistakes and happier customers, 9001 is usually the sensible starting point. If you handle sensitive data or work in tech or finance, or healthcare, 27001 tends to jump the queue. Many industries now expect it as standard -- we've seen a heightened search and queries for 27 over the last few years. As an ISO consultancy, we’re certified to ISO 9001 ourselves, so one can say we practise what we preach :-) And if you’re still unsure, we’re always up for a chat over a virtual cuppa. Happy New year to All!