Who can issue a SOC 2 report, how Australian, mid-tier and specialist firms compare, why independence matters, and the questions to ask before you sign.
Information security and cyber
Articles on ISO 27001, SOC 2, the Essential Eight, SMB1001, data breaches and privacy, written for Australian businesses. Each one explains what changed, what an auditor looks for and how it fits a working information security management system.
Preparing for an ISO 27001 Audit (Stage 1 and Stage 2)
ISO 27001 certification is a two-stage audit, preceded by your own internal audit and followed by annual surveillance. Here’s what each stage involves and how to prepare.
Australia’s Digital Duty of Care: What It Means If You Run an AI Chatbot
Australia’s Digital Duty of Care bill and AI chatbots: where it is up to, what it requires, and the risk assessment work to start now. Updated as it moves.
Your Supplier Lost the Data. The Notification Is Still Yours.
The Quest Apartment Hotels breach shows why outsourcing customer data does not outsource responsibility, and what ISO 27001 expects from third-party risk management.
ISO 27001 Gap Analysis: What It Covers and What It Finds
What an ISO 27001 gap analysis covers, how a Lead Auditor runs one, the gaps found most often, and how the register becomes a certification plan.
ASD Essentials Is Live: What Replaces the Essential Eight and What It Means for You
The Australian Signals Directorate will retire the Essential Eight within two years, replacing it with a broader, outcomes-based “Essentials” series covering enterprise IT, operational technology, cloud and possibly agentic AI. Here’s what’s changing, the timeline, and what Australian businesses should do now.
ISO 27001 Requirements: A Practical Checklist
What does ISO 27001 actually require? The mandatory clauses 4-10, the documents you must have, and a practical checklist to get certification-ready.
ISO 27001 Internal Audit: What Clause 9.2 Requires and How to Run One
ISO 27001 internal audit explained: what clause 9.2 requires, building an audit programme, how an audit runs, good findings, and who should do it.
Shadow AI in the Workplace: The Wild West of Ungoverned AI
Employees are using a patchwork of AI tools with no oversight. Here’s why ungoverned shadow AI is a serious data-loss risk, and how governance closes the gap.
ISO 27001 Certification Cost & Timeline in Australia (2026 Guide)
How much does ISO 27001 certification cost in Australia and how long does it take? A 2026 breakdown of consultant fees, certification body audit costs and timeframes. Typically $15,000-$30,000 and 3-6 months for a small to medium business.
- 1
- 2
- 3
- …
- 8
- Next Page »
