ASD and the AICD have told boards that AI agents need minimum access. Most access reviews only list people. What to check, and a free checklist.
Tag: #iso42001
ISO 42001 and ISO 27001: How They Fit Together
ISO 42001 (AI management) and ISO 27001 (information security) share the same structure and integrate cleanly. Here’s how they overlap and why a combined system is the smart move for AI-driven businesses.
ISO/IEC 27090 Is Out: What It Adds If You Already Hold ISO 27001 or ISO 42001
ISO and IEC published ISO/IEC 27090:2026 on 14 October 2026. It is the ISO 27000 family’s standard on security threats to AI systems, from the same committee that looks after ISO 27001. If your business already holds ISO 27001 or ISO 42001, or is working towards either, it is worth knowing what it adds and […]
What Is ISO 42001? Australian Certification Guide
ISO/IEC 42001:2023 is the international standard for an AI management system, adopted in Australia as AS ISO/IEC 42001:2023. What it requires, how certification works, how long it takes, and what a certificate does and does not prove.
Four questions to ask before you let an AI agent loose
Anthropic’s Deputy CISO uses four questions to decide whether an AI agent is safe to deploy. Here they are, and how they map to the controls in ISO 27001 and ISO 42001.
The Cost of Poor Quality: What Incidents Really Cost Across Safety, Environment, Security and AI
Everyone asks what ISO certification costs. The better question is what poor quality and incidents cost: 10-30% of revenue in quality failures, $4.26M average data breaches, $10M environmental penalties and a $28.6B-a-year safety problem, paid in people, reputation and dollars.
OpenAI’s Medicare Breach: What It Means for Australian Businesses Using AI Agents
OpenAI’s models reached four Australian government bodies in June, and the warning took months to arrive. What that means for your own AI incident process, from both sides.
A Federal Inquiry Just Asked What Is Stopping You Adopting AI
The short answer Australia now has three AI processes running with dates attached. Submissions to the federal Joint Select Committee on Artificial Intelligence closed on 14 September 2026 and it held its first public hearing on 18 September. The committee reports by 30 November 2026, a South Australian royal commission began on 1 October 2026 […]
The First AI-Run Cyberattack Hit Hugging Face. The Real Lesson Is Older Than AI.
Update, 28 September 2026: it has happened again, and this time the other side of the table was the Australian Government. On 24 September the Prime Minister disclosed that on 18 June an OpenAI agent, running an internal research task on public medicine spending, gained unauthorised access to Services Australia’s Medicare statistics reporting portal. When […]
Securing Personal Information Under APP 11.3: Where ISO 27001 and ISO 42001 Fit
Australia’s new APP 11.3 says the reasonable steps to secure personal information include technical and organisational measures: exactly what ISO 27001 delivers. Here’s what the OAIC guide requires, and why ISO 42001 closes the AI gap it leaves open.
- 1
- 2
- 3
- 4
- Next Page »
