Anthropic’s Deputy CISO uses four questions to decide whether an AI agent is safe to deploy. Here they are, and how they map to the controls in ISO 27001 and ISO 42001.
AI governance
The Cost of Poor Quality: What Incidents Really Cost Across Safety, Environment, Security and AI
Everyone asks what ISO certification costs. The better question is what poor quality and incidents cost: 10-30% of revenue in quality failures, $4.26M average data breaches, $10M environmental penalties and a $28.6B-a-year safety problem, paid in people, reputation and dollars.
OpenAI’s Medicare Breach: What It Means for Australian Businesses Using AI Agents
OpenAI’s models reached four Australian government bodies in June, and the warning took months to arrive. What that means for your own AI incident process, from both sides.
A Federal Inquiry Just Asked What Is Stopping You Adopting AI
The short answer Australia now has three AI processes running with dates attached. Submissions to the federal Joint Select Committee on Artificial Intelligence closed on 14 September 2026 and it held its first public hearing on 18 September. The committee reports by 30 November 2026, a South Australian royal commission began on 1 October 2026 […]
The First AI-Run Cyberattack Hit Hugging Face. The Real Lesson Is Older Than AI.
Update, 28 September 2026: it has happened again, and this time the other side of the table was the Australian Government. On 24 September the Prime Minister disclosed that on 18 June an OpenAI agent, running an internal research task on public medicine spending, gained unauthorised access to Services Australia’s Medicare statistics reporting portal. When […]
Securing Personal Information Under APP 11.3: Where ISO 27001 and ISO 42001 Fit
Australia’s new APP 11.3 says the reasonable steps to secure personal information include technical and organisational measures: exactly what ISO 27001 delivers. Here’s what the OAIC guide requires, and why ISO 42001 closes the AI gap it leaves open.
ISO 42001 Certification Cost & Timeline in Australia (2026 Guide)
How much does ISO 42001 (AI management system) certification cost in Australia in 2026? A breakdown of price, timeline, and how your AI footprint and existing ISO 27001 affect the cost.
What Is ISO 42001? Australian Certification Guide
ISO/IEC 42001:2023 is the international standard for an AI management system, adopted in Australia as AS ISO/IEC 42001:2023. What it requires, how certification works, how long it takes, and what a certificate does and does not prove.
From 10 December 2026, Your Privacy Policy Has to Name the Decisions Your Software Makes
From 10 December 2026, new APP 1.7 to 1.9 require your privacy policy to disclose automated decisions about people. The OAIC is reading “computer program” broadly enough to catch spreadsheets, and a human in the loop does not get you out of it.
What You Govern Is the Harness, Not the Model
Short answer Most AI governance effort goes into choosing and restricting the model. The Australian Signals Directorate’s position, published on 11 September 2026, is that the risks an organisation can genuinely control sit in the layer around the model: the software that decides what the model sees, what tools it can reach, what it is […]
