Our Solutions
Compliance Solutions Built for Defence
From a single ISO certification to a full defence compliance programme — WHG delivers structured, practical solutions that meet MOD requirements, satisfy auditors, and build lasting organisational capability.
End-to-End Defence Compliance
Defence compliance is not a product you buy off the shelf. Every organisation faces a different combination of contractual obligations, existing systems, resource constraints, and timelines. WHG designs solutions around your specific situation — not a generic template.
Our solutions span the full compliance lifecycle: from initial obligation mapping and gap analysis, through system design and implementation, to certification support, ongoing surveillance, and continuous improvement. We work alongside your team at every stage.
Whether you are an SME entering the defence supply chain for the first time, a prime contractor strengthening an existing programme, or a public sector body aligning with MOD policy — WHG has the expertise and the methodology to deliver.
Defence Standards
Def Stan, AQAP, STANAG
ISO Certification
6 standards delivered
JSP Frameworks
Policy to procedure
Supply Chain
Audit & qualification
SQEP Frameworks
Competence & roles
Security Governance
ISO 27001, CAF, CE
Core Service Offerings
Six specialist service lines, each designed to address a distinct dimension of defence compliance. Delivered individually or as an integrated programme.
Defence Standard Compliance
Def Stan | AQAP | STANAG
Full implementation support for the Def Stan series — 05-061 quality assurance, 05-135 information security, 05-57 configuration management, and beyond. We map your obligations, close the gaps, and build the evidence trail MOD auditors expect.
- Contractual Def Stan compliance
- MOD audit readiness
- Documented procedures and records
ISO Certification Support
ISO 9001 | 27001 | 22301 | 45001 | 14001 | 50001
End-to-end ISO implementation with a defence-sector lens. We align each standard with the applicable Def Stan or JSP overlay — so your certification satisfies both the accreditation body and the MOD.
- Accredited ISO certification
- Defence-aligned management systems
- Ongoing surveillance support
JSP Framework Implementation
JSP 375 | 440 | 892 | 493 | 604
We translate JSP policy obligations into practical management system requirements. From JSP 892 risk management to JSP 440 security — we build the procedures, registers, and review cycles that demonstrate genuine alignment.
- JSP-aligned policies and procedures
- Risk and compliance registers
- Management review frameworks
Supply Chain Audits
AS9100 | SCMG | Supplier Qualification
Independent second-party supplier audits against ISO 9001, AS9100, Def Stan, and customer-specific requirements. We also design and manage supplier qualification programmes for defence primes and tier-one contractors.
- Independent audit reports
- Supplier qualification status
- Corrective action close-out
SQEP Qualification Frameworks
SQEP | Competence | Role Profiles
Suitably Qualified and Experienced Persons (SQEP) requirements govern who can perform safety-critical and technically complex roles in defence. WHG designs SQEP frameworks, role profiles, and competence assessment processes aligned with MOD expectations.
- SQEP role profiles
- Competence assessment processes
- Training needs analysis
Security Governance
ISO 27001 | JSP 440 | Cyber Essentials | CAF
Integrated security governance covering information security management, cyber resilience, and physical security. We implement ISO 27001 ISMS aligned with JSP 440 and Def Stan 05-135 — and support Cyber Essentials and CAF assessments.
- ISO 27001 certification
- Cyber Essentials / CAF compliance
- Security policy framework
Tailored to Your Sector and Scale
Defence compliance requirements vary significantly by sector, contract type, and organisation size. WHG tailors every engagement to the specific context of the client.
Defence SMEs
Entering the defence supply chain for the first time, or scaling up to meet prime contractor requirements. WHG provides structured, resource-efficient compliance programmes designed for organisations without large internal compliance teams.
Prime Contractors
Strengthening existing compliance programmes, managing supply chain assurance obligations, or responding to MOD audit findings. WHG provides specialist resource to supplement internal teams and address complex compliance challenges.
Public Sector & MOD Bodies
Aligning internal management systems with JSP frameworks, achieving ISO certification, or building the assurance evidence required for internal and external scrutiny. WHG understands the public sector compliance environment.
Defence Technology Companies
Navigating ITAR, UK Strategic Export Controls, and the information security requirements of working with classified or sensitive defence data. WHG provides the compliance framework for technology organisations operating in the defence sector.
Case Study
Defence SME Achieves ISO 9001 and Def Stan 05-061 Compliance in 14 Weeks
The Situation
A UK-based engineering SME was awarded its first MOD prime contract, with a contractual requirement to achieve ISO 9001 certification and demonstrate Def Stan 05-061 compliance within 16 weeks of contract award.
The Challenge
The organisation had no existing quality management system, limited internal compliance resource, and no prior experience of MOD audit processes. The timeline was fixed and non-negotiable.
The WHG Approach
WHG conducted an accelerated gap analysis in week one, designed a lean QMS framework aligned to both ISO 9001 and Def Stan 05-061, and embedded a WHG consultant two days per week throughout implementation. Staff training, internal audit, and management review were completed in parallel.
The Outcome
ISO 9001 certification achieved in week 12. Def Stan 05-061 compliance confirmed by MOD audit in week 14. The client's internal team was fully capable of maintaining the system independently at handover.
Typical Implementation Timeline
Every engagement is scoped individually, but most clients follow a broadly consistent journey from initial assessment to certification. The timeline below reflects a typical ISO implementation with a defence overlay.
Weeks 1–2
Obligation Mapping & Gap Analysis
We identify every applicable standard, Def Stan, and JSP, assess your current position, and produce a prioritised gap register.
Weeks 3–6
System Design
We design the management system framework — policies, procedures, registers, and controls — tailored to your organisation and obligations.
Weeks 7–12
Implementation & Training
We implement the system alongside your team, train staff, and build the evidence trail required for certification and audit.
Weeks 13–14
Internal Audit & Review
We conduct an internal audit against the standard, close any non-conformances, and complete the management review cycle.
Weeks 15–16
Certification Audit
We support you through the certification body audit — available on-site to advise, clarify, and respond to auditor findings.
Ongoing
Surveillance & Improvement
We provide ongoing surveillance audit support, management review facilitation, and continuous improvement guidance.
How We Measure Success
Compliance is not just about passing an audit. WHG measures success across four dimensions that reflect genuine organisational capability — not just documentation.
Audit Outcomes
Zero major non-conformances at certification audit. First-time pass rate across all WHG-supported certifications.
Time to Certification
Delivery within agreed timelines — typically 12–16 weeks for a single ISO standard with a defence overlay.
Contractual Compliance
Full satisfaction of the specific compliance obligations in your MOD or prime contractor contract.
Organisational Capability
Your team understands and can maintain the system independently at handover — not dependent on WHG to keep it running.
“WHG didn’t just help us get certified — they built a system our team actually understands and uses. Eighteen months on, we’ve maintained our ISO 9001 certification and passed our first MOD surveillance audit without any external support.”
Quality Manager, UK Defence Engineering Contractor
Find the Right Solution for Your Organisation
Tell us about your compliance obligations, your timeline, and your current position — and we will design a solution that gets you where you need to be.
Start the Conversation