Compliance Services
Defence Compliance, End to End
The UK defence sector operates within one of the most demanding compliance environments in the world. WHG provides the expertise, frameworks, and hands-on support to help your organisation meet every requirement — and stay there.
A Single Partner for Complex Compliance
Defence compliance is not a single standard or a one-time exercise. It is a continuous, multi-layered obligation spanning quality management, information security, health and safety, environmental responsibility, business continuity, and supply chain assurance — all underpinned by Defence Standards, JSP frameworks, and NATO quality requirements.
Most organisations working in or around the MOD face the same challenge: the standards are numerous, the requirements are specific, and the consequences of non-compliance — lost contracts, failed audits, reputational damage — are significant.
WHG provides a single, specialist partner for the full compliance picture. We understand how the standards interrelate, how MOD auditors think, and how to build systems that satisfy requirements without creating unnecessary bureaucracy.
Compliance Areas We Cover
- ISO 9001 — Quality Management
- ISO 27001 — Information Security
- ISO 22301 — Business Continuity
- ISO 50001 — Energy Management
- ISO 14001 — Environmental Management
- ISO 45001 — Health & Safety
- AS9100 — Aerospace & Defence Quality
- Def Stan 05-061 — Quality Assurance
- Def Stan 05-135 — Information Security
- JSP 440 — Defence Security
- JSP 375 — Health, Safety & Environment
- JSP 892 — Risk Management
- AQAP 2110 / 2120 — NATO Quality
- Cyber Essentials & CAF
ISO Standards in the Defence Context
ISO certifications are the baseline expectation for MOD suppliers. WHG implements each standard with a defence-sector lens — aligning civilian frameworks with the specific requirements of Def Stan, JSP, and AQAP.
ISO 9001
Quality Management
The baseline quality requirement for MOD suppliers. WHG implements ISO 9001 aligned with Def Stan 05-061 and AQAP 2110/2120 — building QMS frameworks that satisfy both the standard and the defence-specific overlay.
- Def Stan 05-061 alignment
- AQAP 2110 / 2120 bridge
- MOD audit preparation
ISO 27001
Information Security
Information security is a contractual and regulatory requirement for organisations handling MOD data. WHG implements ISO 27001 ISMS aligned with JSP 440 and Def Stan 05-135 — protecting classified and sensitive defence information.
- JSP 440 alignment
- Def Stan 05-135 mapping
- Cyber Essentials integration
ISO 22301
Business Continuity
Defence operations cannot afford unplanned disruption. WHG builds ISO 22301 business continuity management systems that ensure your organisation can sustain and recover critical functions — satisfying MOD resilience expectations.
- Critical function mapping
- BIA and recovery planning
- Exercise and testing programmes
ISO 50001
Energy Management
Energy management is an increasing focus for MOD suppliers as the defence sector pursues sustainability targets. WHG implements ISO 50001 frameworks that drive measurable energy performance improvement alongside compliance.
- Energy baseline and targets
- Legal compliance register
- Management review framework
ISO 14001
Environmental Management
Environmental responsibility is embedded in MOD procurement policy. WHG implements ISO 14001 aligned with JSP 375 environmental requirements — helping organisations manage their environmental obligations systematically.
- JSP 375 alignment
- Aspects and impacts register
- Legal compliance framework
ISO 45001
Health & Safety
Occupational health and safety is a non-negotiable obligation for defence contractors. WHG implements ISO 45001 aligned with JSP 375 — building safety management systems that protect people and satisfy MOD requirements.
- JSP 375 alignment
- Risk assessment frameworks
- Incident investigation procedures
Defence Standards Alignment
Defence Standards (Def Stans) are the technical and procedural requirements issued by the MOD. They govern everything from quality assurance procedures (Def Stan 05-061) to information security (Def Stan 05-135) and configuration management (Def Stan 05-57). Compliance with the relevant Def Stans is a contractual requirement for most MOD suppliers.
WHG maps your existing management systems against the applicable Def Stan requirements, identifies gaps, and builds the documented procedures and evidence trail that MOD auditors expect. We ensure your systems satisfy both the civilian ISO standard and the defence-specific overlay.
Key Def Stans We Work With
JSP Frameworks
Joint Service Publications (JSPs) are the MOD's internal policy and procedural framework. They cover risk management (JSP 892), health and safety (JSP 375), security (JSP 440), and many other areas. Suppliers and contractors working closely with the MOD are expected to understand and align with the relevant JSPs.
WHG consultants have direct experience working with JSP frameworks. We translate JSP requirements into practical management system obligations, ensuring your organisation's policies and procedures reflect MOD expectations — not just civilian best practice.
Key JSPs We Work With
Audit Readiness Support
An audit is not the time to discover gaps. WHG prepares organisations thoroughly — so when the auditor arrives, your team is confident, your documentation is complete, and your systems demonstrate genuine compliance.
01
Pre-Audit Review
We conduct a thorough review of your management system documentation, identifying gaps and non-conformances before the auditor does.
02
Gap Closure
We work with your team to close identified gaps — updating procedures, completing records, and ensuring your evidence trail is complete.
03
Staff Preparation
We prepare your team for auditor questioning — ensuring they understand the system, can articulate your processes, and respond with confidence.
04
On-Site Support
Where required, we provide on-site support during the audit itself — available to advise, clarify, and respond to auditor findings in real time.
“WHG gave us the confidence to approach our MOD audit knowing our systems were genuinely compliant — not just on paper. Their understanding of both the ISO standards and the defence-specific requirements made the difference.”
Operations Director, UK Defence SME
Your Compliance Roadmap
Every organisation's compliance journey is different. WHG works with you to build a prioritised, practical roadmap — sequencing certifications and improvements to deliver maximum value at each stage.
Compliance Mapping
We identify every standard, Def Stan, and JSP that applies to your organisation and contracts — building a complete picture of your obligations.
Gap Analysis
We assess your current position against each requirement, producing a prioritised gap register with clear remediation actions.
Sequenced Implementation
We sequence certifications and improvements to deliver maximum value — starting with the obligations that matter most to your contracts.
Ongoing Assurance
We provide ongoing surveillance, internal audit, and management review support — keeping your compliance programme current as standards evolve.
Start Your Compliance Journey
Whether you are mapping your compliance obligations for the first time or strengthening an existing programme, WHG provides the expertise and practical support to get you where you need to be.
Speak to Our Team