Knowledge & Tips

The management review is the most important date in the management system — and usually the worst prepared. How AI supplies the data basis, and which parts top management has to take responsibility for itself.

Aus zwei Normen wird ein System, das wirklich arbeitetDie Revisionen von ISO 9001:2026 und ISO 14001:2026 bringen neue Akzente in Qualitäts- und Umweltmanagement: Klima, Nachhaltigkeit, Verantwortung ...

One system for several standards saves more than documents. It changes how a management team runs its company. The benefits in terms of cost, audits, culture and growth — without the sugar-coating.

The new ISO 9001 was published on 16 September 2026. What has really changed, which clauses are affected, how long your 2015 certificate remains valid — and what makes sense to do now.

For decades, ISO certification was a consulting project billed by the day. AI is shifting that calculation — but not everywhere. An honest comparison, including the points where consulting is still worth the money.

Two or three standards at the same time sounds like three times the work. Because the standards share the same basic structure, it isn't. The blueprint for an integrated management system, step by step.

One is a law, the other a management system. Confuse the two and you invest at the wrong end. What ISO 42001 covers, what the AI Act requires and where the gap remains.

Ninety days are enough for an initial ISO 27001 certification if the order is right. Three phases, the mandatory documents and the points where things get stuck in practice.

Who is certified to ISO 9001:2015 today faces a decision: wait and see or prepare. The new version ISO 9001:2026 has been adopted – and with it begins a transition period that requires a structured migration strategy for certified organizations. The good news: those who have implemented the 2015 version well are in a better position than they think. The bad news: those who wait are heading for time pressure.

Sustainability was a voluntary choice for a long time. An SME that took environmental management seriously did so out of conviction, under customer pressure or from strategic foresight — rarely because the law required it. That has changed. The Corporate Sustainability Reporting Directive, CSRD for short, is turning sustainability reporting into a regulatory requirement for more and more companies. And it reaches mid-sized businesses earlier than many believe.

Two regulations are hitting SMEs at the same time – and many SMEs still don't know how to deal with it. On one side, the EU AI Act, which has been gradually coming into force since summer 2025 and requires documented risk assessments and transparency obligations from companies that use or operate certain AI systems. On the other side, ISO 42001, the international standard for AI management systems, which creates a structured governance framework for a company's entire AI deployment. Anyone who treats these two requirements as separate projects wastes resources. Anyone who thinks of them as a dual strategy wins twice.

ISO 27001 is no longer a nice-to-have for SMEs that need cyber insurance coverage. It is the entry ticket

Auditor training according to ISO 19011, personnel certified for ISO 9001 + 14001 + 27001 + 42001

Anyone using AI without a structured framework for it is acting – whether consciously or not – without governance. ISO 42001 closes this gap.

The certification procedure of Eucerta and its partners is based on the internationally recognized standards ISO 19011, ISO/IEC 17021 and ISO/IEC 27006. These standards establish the foundations for auditing management systems, the competence requirements for certification bodies, and the specific requirements for certifications in the field of information security.

From 2027, the Digital Product Passport (DPP) will become mandatory for more and more industries in the EU. What many companies underestimate: the DPP is not an IT project – it's a structural project. And anyone who doesn't have a robust management system today will face a serious problem tomorrow. In this article, we show why the DPP doesn't work without ISO 9001 and ISO 14001, how AI radically simplifies implementation, and what EUCERTA specifically does differently.

Small businesses face around 65,000 attacks every day – ISO 27001 provides the framework to fight back. Find out why certification has become indispensable for SMEs and how to master implementation in 7 phases.

Many SMEs in Austria, Switzerland, Spain, France, and Italy think: "This doesn't affect us – we don't have 1,000 employees." But while the direct applicability may be limited, the indirect effects are almost universal.

ISO certifications are often significantly more expensive for small and medium-sized enterprises (SMEs) than initially assumed, as numerous hidden costs arise in addition to the obvious audit fees. Not so with Eucerta.

Real returns: Case studies show how ISO certification pays for itself through efficiency gains and new orders. Up to 50% fewer errors after ISO 9001 implementation.

The Draft International Standard (DIS) was published on August 27, 2025. Learn about the five strategic changes towards a genuine quality culture, ethical behavior, and climate-conscious management.

General-purpose AI models are subject to new obligations – Is your company ready for EU AI Act compliance? Organizations using ChatGPT, Copilot, Claude or Gemini face penalties of up to €35 million or 7% of global annual turnover.

Learn everything you need to know about ISO 27001 certification - from the basics to successful implementation.

Why investing in a quality management system pays off for your company and how you can benefit from it.