What does ISO 27001 actually require? The mandatory clauses 4-10, the documents you must have, and a practical checklist to get certification-ready.
Category: Articles
ISO 27001 Controls Explained (Annex A, 2022)
ISO 27001:2022 Annex A lists 93 controls across four themes. Here’s what they are, whether you must implement all of them, and how the Statement of Applicability works.
What Is ISO 42001? Australian Certification Guide
ISO/IEC 42001:2023 is the international standard for an AI management system, adopted in Australia as AS ISO/IEC 42001:2023. What it requires, how certification works, how long it takes, and what a certificate does and does not prove.
Quality Quote: The Relentless Pursuit of Perfection
“The relentless pursuit of perfection” was the original launch tagline for Toyota’s Lexus brand, introduced in 1989. It is not about being impossible to please; it captures a mindset of continual improvement, always refining, innovating and adding value, which is the fundamental principle behind ISO 9001 quality management. Here is where the phrase came from […]
Quality Quote Often Credited to Aristotle
“Quality is not an act, it is a habit.” Will Durant, summarising Aristotle, The Story of Philosophy (1926) A note on the source: the line is usually quoted as Aristotle’s, but Durant wrote it more than two thousand years later: “Excellence, then, is not an act but a habit.” The quality version is a later […]
Quality Quote Attributed to Henry Ford
“Quality means doing the right thing when no one is looking.” Widely attributed to Henry Ford (1863-1947), American businessman A note on the source: we have not been able to trace this line to anything Ford wrote or said, so treat the attribution as unconfirmed. Related guide: Clause 5.1 leadership and commitment, on how leaders […]
How to Check if an ISO Certificate Is Real or Fake
You cannot tell whether an ISO certificate is genuine by looking at it. Forged certificates used to give themselves away through bad typography, wrong logos and clumsy wording. They do not any more. The only reliable way to verify a certificate is to check it against the register of the accreditation body for the region, […]
Software Supply Chain Security: The Assets Nobody Put on the Register
The software you buy, the components inside it, and the machines that build it. Most asset registers cover the first and stop there.
Australian Government Cyber Security Policies: A State-by-State Guide
Every Australian government now has a cyber security policy for its own agencies, and most have rewritten theirs in the last two years. If you are a government agency, these policies set your minimum controls and your annual reporting. If you supply services to government, they matter almost as much: the requirements flow down into […]
The ACSC Just Told You Your Website Is the Attack Surface
A global campaign is deploying webshells through known CMS and plugin vulnerabilities, and the ACSC says many small and mid-sized Australian businesses are already impacted. Nearly every flaw already has a patch.
- « Previous Page
- 1
- 2
- 3
- 4
- …
- 18
- Next Page »
