SafeWork NSW has published its four regulatory priorities for 2026-27. A regulator that publishes its priorities has effectively written your internal audit programme for you.
Category: Articles
What Is a Streamline Management System?
A Streamline management system is a management system built around how your business already runs, not bolted on beside it. It carries the least administrative overhead the standard will allow, every part of it has to earn its place by adding value, and it follows your actual operations and processes rather than a template. The […]
Heat free pasteurisation on the horizon, developed by Aussie company Naturo
Australian company Naturo has developed a milk-processing method that extends shelf life without using heat, aiming to retain more of the flavour and nutritional qualities lost in conventional pasteurisation. It is a useful reminder that food-safety outcomes and product quality can both be improved through process innovation, provided the controls behind that process are validated […]
Shadow AI in the Workplace: The Wild West of Ungoverned AI
Employees are using a patchwork of AI tools with no oversight. Here’s why ungoverned shadow AI is a serious data-loss risk, and how governance closes the gap.
HACCP Certification in Australia: What’s Involved
HACCP is the systematic approach to food safety built on seven principles. Here’s what it covers, why food businesses get certified, and how the process works.
What is SOC 2? A Plain-English Guide for Australian Businesses
SOC 2 is a US attestation report on your security controls, increasingly asked for by US customers. Here’s what it is, Type I vs Type II, and how to get it from Australia.
ISO 27001 vs SOC 2: Which Does Your Australian Business Need?
ISO 27001 and SOC 2 both prove you manage information security, but they suit different markets. Here’s the difference, and how one system can support both.
What is TISAX? The Security Standard for Automotive Suppliers
TISAX is the automotive industry’s information security assessment, based on the VDA ISA and aligned to ISO 27001. Here’s what it is, the assessment levels, and how to prepare.
DRY ISO 9001 Quality Management Systems: Don’t Repeat Yourself
We recently came across a handy principle borrowed from software engineering: DRY (Don’t Repeat Yourself). The idea is to reduce the repetition of information by ensuring every piece of knowledge has a single, unambiguous, authoritative representation within a system. In plain terms, a single source of truth. Applying this methodology to your management system makes […]
AUSTRAC Tranche 2: You’re Now Holding Clients’ ID Documents. Where Are Your Controls?
From 29 July 2026, around 80,000 Australian firms must enrol with AUSTRAC and hold clients’ identity documents. An ISO auditor on the security exposure most of them will miss.
