BS7858 explained by Graham Johnson: 18 years of operational experience. What the standard requires, where employers go wrong and how to get audit ready.