Practical governance, risk, compliance and service management support from a practitioner who has implemented, operated and audited management systems in real-world organisations.
iso-standard.app combines intelligent compliance software with hands-on consultancy and advisory support. Whether you are preparing for certification, improving an existing management system, building a risk framework or embedding governance into day-to-day operations, we provide practical support designed around your organisation's maturity, risk profile and commercial objectives.
Every engagement is delivered by a practitioner with real implementation, audit and leadership experience — not a template pack.
Design, implement and improve practical Information Security Management Systems aligned to ISO 27001.
Practical implementation — not documentation for documentation's sake.
Build service management systems that improve consistency, control, customer confidence and operational performance.
Create quality management systems that improve process ownership, accountability, customer satisfaction and continual improvement.
Support organisations developing responsible, governed and risk-aware approaches to artificial intelligence.
Informed by the founder's doctoral research into the AI-Assisted Human.
Practical risk management support that helps organisations identify, assess, treat and monitor risks in a way that supports better decisions.
Support for organisations that need to strengthen governance, assurance and control across technology, service delivery and business operations.
Senior governance, risk, compliance and service management expertise without the cost of a full-time executive hire. Ideal for organisations that need experienced leadership to mature governance, risk, information security, quality or service management practices, but do not yet require or cannot justify a full-time senior appointment.
Governance, Risk, Compliance and Service Management Leader
Michael McCarroll is a governance, risk, compliance and service management professional with more than two decades of experience helping organisations improve operational performance, information security, service management and organisational governance.
His experience spans local government, managed service providers, insurance services, enterprise IT organisations and regulated sectors. Throughout his career he has designed, implemented and matured management systems, governance frameworks, risk management processes and operational capabilities that deliver measurable business outcomes.
Michael has led ISO 27001, ISO 20000-1 and ISO 9001 initiatives, managed PCI-DSS compliance programmes, established information security governance frameworks and successfully prepared organisations for external certification and assurance audits.
His approach combines practical implementation experience, academic study and doctoral research into human–AI collaboration, enabling organisations to adopt governance and compliance practices that are effective, sustainable and future-facing.
Michael has held responsibility for integrated governance across quality, information security, IT service management, environmental management implementation and HSCN compliance. His work has focused on embedding governance into daily operations, improving processes, strengthening audit readiness and using governance as a driver for cultural and operational change.
Michael led the transformation of support services within a rapidly growing managed service provider. He designed and implemented an ITIL 4 aligned operating model focused on sustainability, consistency and measurable service improvement.
Michael introduced an ISO 27001-aligned Information Security Management System, managed a successful PCI-DSS certification programme and founded the IT Security Board responsible for information security governance across people, process, policy and technology.
Michael supported successful ISO 27001 certification and introduced improvements across asset management, procurement, event management, patch management, knowledge management and operational performance.
As Director of SR1 IT Solutions, Michael managed customer relationships, developed new business and supported technical delivery within a managed service provider environment. He developed processes and technical services designed to protect the confidentiality, integrity and availability of client data.
Michael's earlier career with HP Enterprise Services and EDS provided a strong foundation in enterprise IT operations, team leadership, service support and ITIL problem management.
Michael also brings experience from the Housing Association sector, further strengthening his background across governance, service management, risk, operational improvement and organisational assurance. This section will be expanded with role-specific responsibilities, achievements and outcomes.
Exploring how artificial intelligence can augment human capability, improve decision-making and support responsible governance.
Michael is currently undertaking doctoral research exploring how artificial intelligence can augment human capability within governance, risk, compliance and decision-making environments.
The research investigates how organisations can create effective partnerships between humans and artificial intelligence, combining machine intelligence with human judgement, accountability, ethics and contextual understanding.
Rather than viewing AI as a replacement for human expertise, the research focuses on the concept of the AI-Assisted Human: a future operating model where individuals are empowered by intelligent systems that enhance decision-making, productivity, learning and organisational performance.
Exploring how AI can act as a trusted advisor, coach and analytical partner that enhances professional capability while preserving human accountability.
Investigating how organisations can govern AI responsibly while maintaining transparency, explainability and human control.
Examining how AI can support governance, risk and compliance professionals without replacing professional judgement.
Researching how organisations must adapt leadership, culture, governance structures and operating models to successfully integrate AI-enabled ways of working.
The long-term vision for iso-standard.app is directly informed by Michael's doctoral research into the AI-Assisted Human.
The platform is being developed as an AI-assisted governance and compliance solution that helps organisations build, operate and improve management systems while preserving human accountability.
The aim is not to replace governance, risk or compliance professionals. The aim is to support them with intelligent tools that reduce administrative burden, improve evidence quality, strengthen risk visibility and enable better decision-making.
“Artificial intelligence should enhance professional judgement, not replace it.”
iso-standard.app is designed around a human-led model of governance. AI helps analyse information, suggest improvements, identify gaps, organise evidence and support decision-making — but accountability remains with people.
Use AI to reduce repetitive administration, organise evidence, identify gaps and support management system development.
Keep experienced professionals in control of decisions, risk treatment, governance priorities and organisational change.
Move beyond one-off certification activity towards embedded, continually improving management systems.
Tell us a little about your organisation and challenge. Michael responds personally, usually within one business day.
