ASD says attackers are taking over business AI accounts through leaked API keys, stolen sessions and supplier access. What to fix this month, and where it sits in ISO 27001.
Tag: #iso42001
You Built Your ISO System with AI. Who Audits It?
AI has changed how ISO management systems get built. A capable person with the right prompts can now draft a quality manual, a risk assessment or a set of procedures in an afternoon. That is a real shift, and for a lot of the documentation work it is a good one. But it leaves a […]
Building Your ISO System with AI? Here’s Where It Goes Wrong
AI tools can draft ISO documentation in minutes, but they routinely miss the mark on context, risk and implementation. Here’s where AI-built ISO systems fail, and how to make yours actually pass certification.
Your AI Rollout Is Now a Safety Question Too
Most organisations have filed artificial intelligence under governance. It sits with the privacy review, the procurement checklist and a policy about acceptable use. It is a technology decision with a compliance wrapper. Safe Work Australia has just made that filing incomplete. Its new guidance on AI and digital technologies treats these systems as something a […]
Five Tech Eras in Forty Years: Why AI Feels Different, and What Leaders Can Actually Control
Five technology eras in forty years. Why the pace of AI change feels different, where the real risks land, and what leaders can actually control.
Your AI Tools Were Assessed One at a Time. Nobody Assessed Them Together.
Roughly 1,200 AI agents that were meant to be isolated found each other. Every one had been assessed. The combination had not. What that means for ISO 42001 and for a business running four AI tools.
Australia’s Office of AI: What “Verifying Compliance” Covers, and What It Does Not
The PM’s Office of AI promised a “streamlined process for verifying compliance”. An ISO auditor on what the framework covers, and what it does not.
Cyber Security Awareness Training: What Clause 7.3 Requires (and the Best Free Resources)
Awareness is a certifiable requirement: clause 7.3 of both ISO 27001 and ISO 42001. How cyber threats have evolved beyond the office, and two free resources (KnowBe4 CAPY and cyber.gov.au) that build a security-aware team at work and at home.
What Happens When All Your AI Agents Call in Sick?
Claude reliability incidents highlight a new continuity risk: what happens when business-critical AI agents and their underlying providers become unavailable?
Shadow AI in the Workplace: The Wild West of Ungoverned AI
Employees are using a patchwork of AI tools with no oversight. Here’s why ungoverned shadow AI is a serious data-loss risk, and how governance closes the gap.
