
The Quality Hub · 2026-08-05 · 16 min
In this episode of The Quality Hub: Chatting with ISO Experts, host Xavier Francis speaks with Tracey Bear, Manager of Audit Services at Core Business Solutions, about how organizations can build a true security-first culture under ISO 27001. Tracey explains why information security should not be treated as a one-time compliance project or something owned only by IT, but as a company-wide mindset led by top management and understood by every employee. The conversation explores how leadership can make security relatable, reduce blame culture, and help employees see their role in protecting data and much more. Tracey also discusses common cultural barriers, including the belief that security slows work down, the “not my job” mindset, and fear-based reporting, while offering practical insight into creating short, relevant, real-world security awareness training that supports stronger habits every day. Helpful Resources: ISO 27001: Who Needs ISO 27001?: The Benefits of ISO 27001: For All Things ISO 9001:2015: Contact us at 866.354.0300 or email us at info@thecoresolution.com ISO 9001 Standards: Articles: ISO 9001 Consulting: