Clause 4.3 says the organisation shall determine the boundaries and applicability of the management system to establish its scope. Read that first word again. The organisation. Not the certification body, not the auditor, not the consultant. You decide what your management system covers, and you are entitled to draw that line deliberately. That freedom comes […]
Articles
ISO 9001 Clause 8.3: Design Inputs, Outputs, Review, Verification and Validation
Clause 8.3 of ISO 9001 covers the design and development of products and services, and it works as a chain: you define the inputs (what the design has to satisfy), you control the work through review, verification and validation, and you produce outputs that can actually be used to make or deliver the thing. Get […]
The First AI-Run Cyberattack Hit Hugging Face. The Real Lesson Is Older Than AI.
Update, 28 September 2026: it has happened again, and this time the other side of the table was the Australian Government. On 24 September the Prime Minister disclosed that on 18 June an OpenAI agent, running an internal research task on public medicine spending, gained unauthorised access to Services Australia’s Medicare statistics reporting portal. When […]
The OAIC Just Cleared Qantas Over a 5.7 Million Record Breach: What “Reasonable Steps” Means
The OAIC closed its inquiry into the Qantas breach with no action. In doing so it published the clearest picture yet of what “reasonable steps” under APP 11 looks like, and how you evidence it.
South Australia Just Dropped the Fall Threshold to 2 Metres. The Data Says That’s Where People Were Falling.
From 1 July 2026, SA reduced the high-risk construction work fall threshold from three metres to two. The reason is in the data: 68% of falls from above 2 metres happened between 2 and 3 metres, the exact gap the old rule left open.
Who’s Backing Up Your Cloud Data? The SaaS Backup Gap
Most businesses assume Xero, Microsoft 365 and Google back up their data. Under the shared responsibility model, they don’t. The SaaS backup gap and how to close it.
Securing Personal Information Under APP 11.3: Where ISO 27001 and ISO 42001 Fit
Australia’s new APP 11.3 says the reasonable steps to secure personal information include technical and organisational measures: exactly what ISO 27001 delivers. Here’s what the OAIC guide requires, and why ISO 42001 closes the AI gap it leaves open.
Which AI Tools Are ISO 42001 Certified, and How to Stop Them Training on Your Data
AI tools are now woven through everyday business: drafting emails, summarising documents, writing code. For anyone responsible for governance, two questions matter more than which model is “best”: is the provider certified to manage AI responsibly, and is your data being used to train their models? The answers vary a lot between tools, and between […]
Local Government Quality Management Systems: ISO 18091 and the 2026 ISO 9001 Revision
Why should local governments consider ISO 9001 and ISO 18091? Because a council is judged on service delivery, and a quality management system is the only framework that treats service delivery as something you design, measure and improve rather than something you hope for. There is also a deadline worth knowing about. ISO 9001 has […]
Integrated Management Systems in Australia: Combining Two or More ISO Standards
How an integrated management system combines ISO 9001, ISO 14001 and ISO 45001 into one efficient system: the benefits, how it works, and whether it’s right for your business.
- « Previous Page
- 1
- 2
- 3
- 4
- 5
- 6
- …
- 19
- Next Page »
