The PM’s Office of AI promised a “streamlined process for verifying compliance”. An ISO auditor on what the framework covers, and what it does not.
Articles
Cyber Security Awareness Training: What Clause 7.3 Requires (and the Best Free Resources)
Awareness is a certifiable requirement: clause 7.3 of both ISO 27001 and ISO 42001. How cyber threats have evolved beyond the office, and two free resources (KnowBe4 CAPY and cyber.gov.au) that build a security-aware team at work and at home.
ISO 17025 Accreditation in Australia: What Testing & Calibration Labs Need to Know
ISO 17025 is the standard for testing and calibration laboratory competence. In Australia it’s accredited by NATA. Here’s what it requires and how the process works.
They Said They Would Monitor It. That Was the $7.3 Million Part.
There is a moment in an environmental audit that catches people out more reliably than anything in the aspects register. I ask to see the evidence behind a sentence on the company website. Not a difficult sentence. Usually something like “we are committed to sustainable sourcing”, or “we monitor our suppliers’ environmental performance”, or “carbon […]
1,205 Data Breaches: What Australia’s Worst Year on Record Tells You
The OAIC recorded 1,205 notifiable data breaches in 2025, the highest since the scheme began. The number that matters isn’t the headline. It’s the 489 that weren’t attacks.
ISO Templates vs a Real Management System: Do Templates Work?
ISO templates and toolkits promise a shortcut to certification. They can help, but a downloaded template isn’t a management system. Here’s where they help and where they hurt.
The Uninvited Guest: Why You Should Never Let Bots Auto-Join Your Meetings
Outlook autocompletes scott@unwanted.com instead of scott@mycompany.com. The stranger’s AI notetaker joins on their behalf, and records the lot. How it happens, and the Teams setting that stops it.
ASD Wants Critical Infrastructure Isolated for 3 Months. What If You Supply It?
ASD asks critical infrastructure operators to run isolated for three months. If you supply them, your access is cut first. What it means for ISO 27001.
When Your Failover Fails: Business Continuity and the Mobile-Outage Trap
Most business continuity plans nominate mobile as the failover when the primary connection drops. Today’s nationwide Telstra outage showed why that’s a hidden single point of failure, and what a real BCP does about it.
Microsoft Launches Defender Experts Suite: What It Means for Australian Businesses
Microsoft’s Defender Experts Suite is a managed detection and response (MDR) service: in plain terms, Microsoft’s own security analysts watching your environment and hunting for threats using the signals your Microsoft 365 and Defender licences already generate. For the many Australian businesses running on Microsoft but without a 24/7 security team, it’s a genuinely useful […]
- « Previous Page
- 1
- …
- 14
- 15
- 16
- 17
- 18
- 19
- Next Page »
