Compliance Watch, week ending 5 November 2026
I've put the supplier check first because your data can travel through a subcontractor. Most of the rest are patch and safety checks for the right person.
🇦🇺 Do this week
Subcontractor accessed court recordings
Australia, 4 Nov 2026. The Office of the Australian Information Commissioner (OAIC) found 3 employees of an India based subcontractor to VIQ Solutions accessed court recordings between September 2025 and February 2026. VIQ is now in liquidation, so the regulator is taking no further action.
This week: Ask key suppliers whether subcontractors can access your data and must tell you.
🇦🇺 Australia
Benzene limit falls in 2027
Australia, 29 Oct 2026. Ministers cut the benzene limit to 0.2 parts per million (ppm) from 1 June 2027. It applies only where benzene is used or produced.
This week: Check monitoring can show results at 0.2 ppm.
Crane alert covers serious injury
Queensland, 27 Oct 2026. A crane load of about 4.5 tonnes seriously injured a worker's feet in January 2026. Investigations continue.
This week: When a load is lowered, where is the person guiding it standing?
🇮🇳 🇸🇬 India and Southeast Asia
GoAhead flaws rated Critical
India, 28 Oct 2026. The Indian Computer Emergency Response Team rated flaws in the GoAhead web server Critical. It runs inside IoT (internet of things), firewall and industrial control devices.
This week: Ask whoever maintains your devices whether any use GoAhead and are updated.
Indian Computer Emergency Response Team advisory
Oracle flaw scores 9.8 out of 10
Singapore, 2 Nov 2026. The Cyber Security Agency of Singapore (CSA) says attackers could take over Oracle Application Object Library, and exploitation attempts have reportedly been seen. It applies only to versions 12.2.3 to 12.2.15.
This week: Ask your Oracle partner whether you're affected and the update date.
🇦🇪 🇸🇦 Gulf
Dubai sandbox applications close 18 Dec
Dubai, 28 Oct 2026. Dubai Future Foundation launched an AI (artificial intelligence) Sandbox where companies test products with regulators. It applies only to companies building AI for Dubai.
This week: Keep a list of AI tools you use and who approved them.
Nitaqat threshold rises to 5,000 riyals
Saudi Arabia, 25 Oct 2026. The minimum wage to count Saudi staff fully toward Nitaqat rises to 5,000 riyals six months after the measure takes effect, then 6,000 riyals twelve months after that. It applies only to private sector employers.
This week: Check how many Saudi staff earn under 5,000 riyals.
🇺🇸 United States
GitLab and Cisco flaws exploited
United States, 29 Oct 2026. CISA (Cybersecurity and Infrastructure Security Agency) added two actively exploited flaws to its Known Exploited Vulnerabilities (KEV) catalogue. They cover GitLab and Cisco firewalls.
This week: Ask your IT provider if the Cisco firewall fix is in.
WordPress core flaw exploited
United States, 3 Nov 2026. CISA added a WordPress Core race condition to its KEV catalogue. It applies only if your website runs on WordPress.
This week: Ask your website provider whether WordPress core is updated.
Where Vissibl fits
Vissibl holds the frameworks you're certified to and the regulations you answer to together in one product, and our team runs it with you as a managed service. It tracks what's due, chases the evidence and checks your suppliers, and you sign off.