“You can’t manage what you can’t measure.” is a quality quote often attributed to Peter Drucker, the Austrian-born American management consultant, educator and author. The Drucker Institute says he never said it, and that he knew many of the things that matter most cannot be measured. Related guide: SMARTER objectives and clause 6.2, on setting […]
Category: Articles
ISO 42001 Requirements: What the Standard Asks For and How to Implement It
What ISO/IEC 42001 requires, clause by clause, the 38 Annex A controls, and a step-by-step plan for organisations that use AI and those that build it.
From 10 December 2026, Your Privacy Policy Has to Name the Decisions Your Software Makes
From 10 December 2026, new APP 1.7 to 1.9 require your privacy policy to disclose automated decisions about people. The OAIC is reading “computer program” broadly enough to catch spreadsheets, and a human in the loop does not get you out of it.
Leverage: The Insider Threat Your Access Reviews Don’t Catch
Kompromat is a Russian word for an old trade: leverage over people with access. How coercion works on insiders, and the ISO 27001 controls that blunt it.
The Certificate Looked Real. Did Anyone Check It With the RTO?
WorkSafe Victoria is warning employers about fake qualification certificates. How to check a training certificate or licence with the issuer, step by step.
ASIC Fined a Licensee $1.35 Million for the System It Didn’t Have
Fortnum had a cyber policy, a self-assessment and a risk register. The court still ordered a $1.35m penalty. What was missing, mapped to ISO 27001.
Psychosocial Hazards at Work: What Australian Law Requires, and Where ISO 45001 Stops Short
Every Australian jurisdiction now requires you to manage psychosocial hazards as hazards, not as wellbeing. What the law asks for, where the states differ, and why a certified ISO 45001 system may not prove compliance.
Everyone Heard 2030. The First Post-Quantum Milestone Is the End of 2026.
Quantum computing arrives in most boardrooms as a 2030 problem, which is a comfortable place to file it. Four years is somebody else’s budget cycle. The date worth writing down is nearer than that. ASD’s recommended transition timeline puts the first milestone at the end of 2026, and what it asks for is not a […]
TLS Certificates Drop to 100 Days in March 2027. Can Your Asset Register List Them?
Most security deadlines arrive as a consultation, a speech or a draft Bill, and the honest advice is usually to wait and see. This one is different. The schedule is already running, the first step took effect six months ago, and the organisations that enforce it have already voted. From 15 March 2026, publicly trusted […]
The Essential Eight Explained (Maturity Levels 0-3)
The Essential Eight is the ACSC’s baseline set of cyber mitigation strategies. Here’s what the eight are, how the maturity levels work, and how it relates to ISO 27001.
- « Previous Page
- 1
- …
- 6
- 7
- 8
- 9
- 10
- …
- 18
- Next Page »
