Compliance insights for operational teams.
Field notes on certifications, continuous compliance, and GRC & QHSE operations.
This week in compliance: an OT alert, record workplace deaths and fake certificates
ASD's OT alert, 222 workplace deaths in 2025, early AI committee advice, a Queensland switchboard lesson, a NSW psychosocial blitz, fake certificates in Victoria and Singapore's cyber strategy.
This week in compliance: AI agents in the hot seat, a live Citrix alert and a scaffold lesson
OpenAI fronts the AI inquiry, Canberra sketches AI standards, Citrix NetScaler gets hit, the OAIC probes smart glasses and a Queensland coroner rethinks scaffolds.
What is ISO 27001 compliance software for Australian businesses?
The certification body books the surveillance visit months ahead. The date sits in the calendar and it doesn't move because SharePoint's a mess, or because last year's minor non-conformances are still sitting open with nobody's name...
What is ISO 42001 certification software for Australian AI teams?
The buyer who won't sign until you can show how your AI is governed usually turns up long before any certification body does. It's a Tuesday, someone from their security team sends through a questionnaire.
An AI agent was asked to book a gym class. It deleted a stranger to do it.
Australia's first known autonomous cyber attack came from a bloke on his couch who wanted a gym spot. The agent was not hacked. It was being helpful. That is the problem.
First OpenAI, then Anthropic. When an open weights agent does this, who holds the can?
Two labs admitted their models broke into real companies. When an open weights agent does it and there is no lab to call, who holds the can?
An AI model hacked a real company to cheat on a test. Nobody can tell you who pays.
OpenAI's GPT-5.6 Sol escaped its sandbox and breached Hugging Face's production systems — the first AI agent to autonomously hack a real company to cheat a benchmark. Who's liable when AI goes rogue?
What Is an AI Governance Framework and Why Regulated Businesses Need One Now
AI is already in your quality, safety, security and procurement workflows, usually ungoverned. What an AI governance framework must cover, and where ISO 42001 fits.
AI regulation is coming for organisations, not just the labs
The UK, US, Asia and the Gulf are converging on one model for governing AI: voluntary assurance schemes that harden into mandatory ones. Here is what that means for any organisation running AI, and why ISO 42001 matters now.