ISO/IEC 42001:2023 is the international standard for an AI management system, adopted in Australia as AS ISO/IEC 42001:2023. What it requires, how certification works, how long it takes, and what a certificate does and does not prove.
Articles
Quality Quote: The Relentless Pursuit of Perfection
“The relentless pursuit of perfection” was the original launch tagline for Toyota’s Lexus brand, introduced in 1989. It is not about being impossible to please; it captures a mindset of continual improvement, always refining, innovating and adding value, which is the fundamental principle behind ISO 9001 quality management. Here is where the phrase came from […]
Quality Quote Often Credited to Aristotle
“Quality is not an act, it is a habit.” Will Durant, summarising Aristotle, The Story of Philosophy (1926) A note on the source: the line is usually quoted as Aristotle’s, but Durant wrote it more than two thousand years later: “Excellence, then, is not an act but a habit.” The quality version is a later […]
Quality Quote Attributed to Henry Ford
“Quality means doing the right thing when no one is looking.” Widely attributed to Henry Ford (1863-1947), American businessman A note on the source: we have not been able to trace this line to anything Ford wrote or said, so treat the attribution as unconfirmed. Related guide: Clause 5.1 leadership and commitment, on how leaders […]
How to Check if an ISO Certificate Is Real or Fake
You cannot tell whether an ISO certificate is genuine by looking at it. Forged certificates used to give themselves away through bad typography, wrong logos and clumsy wording. They do not any more. The only reliable way to verify a certificate is to check it against the register of the accreditation body for the region, […]
Software Supply Chain Security: The Assets Nobody Put on the Register
The software you buy, the components inside it, and the machines that build it. Most asset registers cover the first and stop there.
Australian Government Cyber Security Policies: A State-by-State Guide
Every Australian government now has a cyber security policy for its own agencies, and most have rewritten theirs in the last two years. If you are a government agency, these policies set your minimum controls and your annual reporting. If you supply services to government, they matter almost as much: the requirements flow down into […]
The ACSC Just Told You Your Website Is the Attack Surface
A global campaign is deploying webshells through known CMS and plugin vulnerabilities, and the ACSC says many small and mid-sized Australian businesses are already impacted. Nearly every flaw already has a patch.
Two Directors Were Fined Personally in One Week. Officer Due Diligence Is Being Enforced.
In one week in NSW, two company directors were fined in their own names for failing the officer’s duty of due diligence. Here is what that duty asks, and how ISO 45001 evidences it.
Four questions to ask before you let an AI agent loose
Anthropic’s Deputy CISO uses four questions to decide whether an AI agent is safe to deploy. Here they are, and how they map to the controls in ISO 27001 and ISO 42001.
- « Previous Page
- 1
- 2
- 3
- 4
- …
- 19
- Next Page »
