Responding to Consumer Vulnerability Under ISO 22458
ISO 22458 Clause 8
Clause 8 covers the response to consumer vulnerability - response options, shared decision making, signposting to specialist support, and improving outcomes for other consumers.
ISO 22458 Clause 8 - Responding to Consumer Vulnerability
Clause 8 is the operational heart of the standard. Identification under Clause 7 is only useful if the response that follows actually improves the outcome for the consumer. Clause 8 sets out what frontline staff need to be able to do once a vulnerability has been identified - understand the risks and needs, review the existing service relationship, choose between response options, make decisions jointly with the consumer, and signpost to specialist help where relevant. It also requires action to improve outcomes for other consumers in similar situations.
Resources for Response - ISO 22458 Clause 8.1
Clause 8.1 requires the organisation to provide frontline staff with the resources and support to think creatively and innovatively about response options, be flexible in tailoring options to individual needs, improve outcomes and minimise harm for the individual now and in future, and improve outcomes for other consumers using the service.
Two of these are noteworthy. The expectation that staff think creatively and innovatively goes beyond simply applying a fixed playbook - frontline staff need both the authority to use judgement and the support of a culture that backs them when they do. The expectation of improving outcomes "in future" means a single fix is not enough if the underlying issue is likely to recur.
Understanding Risks and Needs - ISO 22458 Clause 8.2.1
Before choosing a response, frontline staff need to understand what the consumer is actually facing. The standard requires guidance for frontline staff on how to better understand the difficulties being faced by the individual and the potential consequences. This typically takes the form of structured prompts, decision trees, or escalation routes for cases where the difficulty is outside the staff member's experience.
Understanding the Existing Relationship - ISO 22458 Clause 8.2.2
Frontline staff also need to review what the consumer is already getting from the organisation before proposing a response. Clause 8.2.2 specifically requires a review of customer records, account history and the suitability of the service, products or tariffs being provided. A consumer who is struggling with payments may be on the wrong tariff, or holding a service they do not need, and the right response may be to address that before proposing additional support.
Response Options - ISO 22458 Clause 8.2.3
The standard expects the organisation to provide frontline staff with guidance on the range of response options available, identifying the most suitable ones for the service provided. Response options should aim to minimise or prevent harm now and in future, and improve the quality of the consumer's experience and the final outcome.
The actual options depend on the service. Examples in different sectors include flexible payment arrangements, alternative communication formats, longer cancellation windows, fee waivers, deferred actions, alternative product recommendations, longer call times, callbacks at convenient times, and access to specialist staff. The point is that frontline staff have a defined range of options to draw from, not that they have to invent something new for every interaction.
Shared Decision Making - ISO 22458 Clause 8.2.4
Decisions about response are made with the consumer (or a formally appointed third-party representative under Clause 6.5), not on their behalf. Clause 8.2.4 sets three tests:
- The proposed actions must be feasible, meet individual needs and not lead to further harm.
- The individual affected must be fully involved in discussion of options and supported to make decisions in their best interest.
- The individual must understand the proposed actions and be able to ask questions and express preferences.
This rules out paternalistic approaches where staff decide what is best for the consumer and apply it without discussion. It also rules out putting the entire weight of complex decisions on a consumer who is struggling - "supported to make decisions in their best interest" is the qualifier that matters.
Signposting to Specialist Support - ISO 22458 Clause 8.2.5
Where specialist information, advice or support would help, frontline staff should refer the consumer to either a specialist person or team within the organisation (such as an internal vulnerability team where one exists) or a trusted external organisation such as a charity providing help on specific issues. The list of trusted external partners should be maintained as part of the inclusive service strategy and reviewed periodically.
Improving Outcomes for Others - ISO 22458 Clause 8.3
Frontline staff are required to be proactive in spotting how individual problems point to risks for other consumers in similar situations. The standard's two examples are useful - if a consumer with a visual impairment reports difficulty understanding terms and conditions, staff can propose a layout review or a large-print option; if a consumer with a disability is charged a high insurance premium for a small adaptation that makes the cover unaffordable, staff can propose that add-ons are proportionate to the scale of adaptation.
The mechanism for raising concerns and suggesting changes needs to exist and be known to staff. Without it, the lessons from individual cases stay with individual advisors and never feed back into service improvement.
Response options is the area where I see the biggest gap between the procedure and the practice. The procedure typically lists a sensible range of options, but when I sample customer records I see only one or two of those options actually being applied, with the others gathering dust. Either the menu is too long for staff to remember, or the authority to use them has not been delegated, or the training did not include realistic examples of when each option fits.
For Clause 8.3 specifically I look for the route from individual cases to wider service change.
A tick box on the recording form, a standing item in team meetings, a quarterly review by the Vulnerable Consumer Representative - any of these works, but something has to be there. Otherwise the lessons from individual cases never feed back into the service.
Shared decision making sounds like a soft requirement until you audit against it. The test is whether the customer record shows the options that were offered, the response from the consumer, and the agreed action. If the record only shows what the staff member decided to do, the requirement has not been met regardless of how good the outcome was.
Organisations also under-invest in the external signposting list. Two or three trusted partners for the most common needs is more useful than a long generic list nobody updates.
Practical Compliance Guidance
Clause 8 is met through the use of various documents, this includes the F-IMS58 Vulnerability Risks Register - where vulnerable consumer risks can be met with appropriate controls, the ER24 Consumer Vulnerability Register - with risk-research, case studies with successful outcomes, advice support-providers and monitoring, and the CC-CV1 Code of Conduct for Vulnerable Consumers which details how staff should respond to consumer vulnerability.
The PP-1-17 procedure sets out the response approach and references the recording forms that capture individual interactions.
The alphaZ documents below cover the procedure, recording forms and supporting tools used to respond to consumer vulnerability and feed lessons back into service improvement.
| alphaZ document | How to use it |
|---|---|
| ISO 22458 Toolkit | Full document set for an ISO 22458 inclusive service management system, including the response procedure, recording forms and follow-up tools. |
| PP-1-17 Vulnerable Consumer Procedure | Internal procedure that sets out the response approach including understanding needs, the range of response options and shared decision making. |
| F-Q102 Vulnerable Consumer Report | Form for capturing details of a specific interaction including the response options offered, the agreed action and any follow-up required. |
| F-CV1 Focus CV Committee | Committee meeting form for reviewing consumer vulnerability cases, trends and service improvements raised through frontline feedback. |
| ISO 22458 Awareness Training Course | Training presentation covering the response approach, shared decision making and the signposting principles. |
| GG-1-17 Consumer Vulnerability Guidance | Plain-language guidance document used to support staff during response decisions and post-interaction review. |
Note - all the above files can be downloaded with an alphaZ subscription.
Frequently Asked Questions
UK Legislation
The following UK legislation is directly relevant to ISO 22458 Clause 8. Organisations outside the UK should identify the equivalent legislation applicable in their jurisdiction.
