At Barlow & Co Ltd, our mission is simple: to make accreditation straightforward, accessible, and profitable for your business.
Below we’ve gathered answers to the most common questions and concerns our clients have. If you don’t see what you’re looking for, feel free to get in touch with us — we’ll be happy to advise and support you at every step of the process.
Common questions people ask when researching certifications, accreditations, and compliance schemes.
ISO 9001 is the international standard for quality management systems. It helps organisations improve efficiency, reduce errors, and demonstrate consistent quality to customers. Many buyers and tenders require ISO 9001 as proof of quality assurance.
Most ISO projects can be completed within 30–90 days depending on the scope, existing documentation, and your resources. We tailor a timeline to your requirements and deadlines, such as upcoming tenders.
Yes. We provide consultancy, documentation, risk assessment templates, and implementation support for ISO/IEC 27001. We also help extend to ISO/IEC 27701 (privacy information management) if required.
SSIP (Safety Schemes in Procurement) is a mutual recognition framework for health & safety prequalification. Common SSIP schemes include CHAS, SafeContractor, SMAS Worksafe, CQMS, and Acclaim (via Constructionline). Holding one SSIP can often satisfy buyers across multiple platforms.
CHAS is a health & safety assessment scheme under SSIP. Constructionline is a broader prequalification database (Silver, Gold, Platinum levels) covering financial, technical, and supply chain checks. Many clients require both, depending on the tender.
JOSCAR (for aerospace/defence) and FSQS (for financial services) are industry supplier registers. Buyers often invite suppliers to apply. We guide you through the application, evidence gathering, and renewal requirements.
Cyber Essentials is a UK government-backed scheme for basic cyber security. Cyber Essentials Plus includes independent testing. Many public sector contracts mandate at least Cyber Essentials, and some require Plus.
PCI DSS (Payment Card Industry Data Security Standard) applies to any organisation that processes, stores, or transmits cardholder data. Compliance reduces risk of data breaches and may be contractually required by banks or payment providers.
FORS (Fleet Operator Recognition Scheme) is a voluntary accreditation for fleet operators. Levels include Bronze, Silver, and Gold. Many construction projects in the UK require at least FORS Silver for vehicle operators.
Yes, if your business transports or handles waste in the UK you must register with the Environment Agency (or devolved bodies). We help you apply for the correct type of licence and integrate it with other compliance requirements.
To join Gas Safe Register you must hold recognised gas qualifications and be assessed. For NICEIC or NAPIT electrical schemes you need to demonstrate technical competence and compliance. We support applications and evidence preparation.
No. We are an independent consultancy. Certification is always carried out by recognised bodies (for example UKAS-accredited certification bodies or official scheme owners). We prepare you so that you pass first time.
Costs vary depending on the scheme, your company size, and the chosen certification body. We provide a fixed-fee quote for consultancy and connect you with accredited providers for external audit fees.
Registred in England No: 