Clause 4.2, Understanding the needs and expectations of interested parties, is one of the clauses I most often see treated as a tick-box exercise: a register filled in once, filed away, and never looked at again. It is also a piece of string. How far you take it depends entirely on the business, on which […]
Category: Articles
SMARTER ISO Objectives: Quality, Safety, Environmental, Information Security and AI
Of all the clauses in ISO 9001, quality objectives are the one I most often see treated as a box-ticking chore, and it shows at audit. A wall of vague aspirations like “improve customer satisfaction” with no number attached is the single most common finding I raise under clause 6.2. Objectives that are written well, […]
ISO Clause 4.1 Context of the Organisation: The Standard Says What, You Choose How
Clause 4 is the introduction to the standard, and it asks four questions in order. Who are you (4.1). Who do you have to keep happy (4.2). What does your management system cover (4.3). How does the system work (4.4). Everything that follows in clauses 5 to 10 is built on the answers. Clause 4.1 […]
Looking for an ISO 9001 Consultant? Check the 10 Key Requirements First!
Hiring an ISO 9001 consultant is a decision most businesses make exactly once, with no way to judge the work until an auditor turns up months later. That is an uncomfortable position to buy from, and it has become more uncomfortable lately: in the seven years since we first published this checklist, the number of […]
Links to Australian Safety Codes of Practice: What are they and who should use them?
Codes of Practice are, in my experience, one of the most useful, and most overlooked, tools in Australian work health and safety. This page sets out what they are, how they are made and adopted, how they sit alongside the WHS Act and Regulations, and why they make such a sound foundation for any company’s […]
Your Risk Matrix Has Numbers. Who Decided What They Mean?
The short answer A residual risk score is meaningless on its own. It only says something when measured against a threshold your business agreed in advance, which is your risk appetite, and against written consequence criteria that let two different people score the same event the same way. Most organisations have a matrix and no […]
Risk Matrix Template: A 5×5 Matrix With Consequence Criteria You Can Defend
Most risk matrix templates you can download are a coloured grid and nothing else. Five rows, five columns, green through red, and not one word about what the words mean. That is the part that matters. A grid is trivial to draw. The hard part, and the part an auditor asks about, is what separates […]
ISO 14001:2026: What Changed, and Where Australia Stands
ISO 14001:2026 was published on 15 April 2026, but Standards Australia has not adopted it. Here is what changed, and what it means for an Australian certificate.
Preparing for an ISO 27001 Audit (Stage 1 and Stage 2)
ISO 27001 certification is a two-stage audit, preceded by your own internal audit and followed by annual surveillance. Here’s what each stage involves and how to prepare.
The Patch Directive Went Out the Same Day. Not Every School Applied It.
ASD alerted at 10am, the Department told every school by 4.32pm, and one unpatched school exposed student data. Why sending a directive is not a control.
- « Previous Page
- 1
- …
- 9
- 10
- 11
- 12
- 13
- …
- 18
- Next Page »
