Blog

We use this place to discuss random subjects. You may find some of them interesting...

Topics

Management systems & auditing Environment and sustainability Governance, risk. Compliance Organizational resilence Safety and health Information security & privacy Quality and Project Management Artificial intelligence

View all topics

68f3486220a57_Privacy Information ISO 27701

ISO/IEC 27701:2025. What’s new with the second edition of the Privacy Information Management standard?

A new edition of ISO/IEC 27701 has been published in October 2025. This article analyzes the changes to the privacy information management landscape

68e1fd631841d_Microsoft Responsible AI vs ISO 42001

Microsoft Responsible AI Standard and ISO/IEC 42001. A brief comparative analysis

ISO/IEC 42001 and Microsoft Responsible AI Standard are two leading frameworks for responsible AI. They share a similar goal but differ in many ways.

Risk owners in information security management. Why are they important?

Risk ownership is a key aspect in information security management. Without clear ownership risks are only managed in theory

We have a draft for ISO 9001:2026. What to expect?

The draft of ISO 9001:2026 has been released. No major updates compared to the 2015 edition of the standard

Preparation for an audit. Some suggestions for auditors

Good preparation, humility and effective dialogue, evidence-based findings and decisions, professional attitude and effective time management are ingredients of a good audit

The 2025 Edition of ISO 37001 – What has changed? Quick answer… Not much

ISO 37001 the reference standard for anti-bribery management systems has been revised in 2025. In this article we look at what has changed

What is HACCP and why it matters for food safety

Understand what HACCP is, how it works and where it applies. Discover with examples why HACCP is key for food safety

Understanding ISO 37001. Addressing facilitation and extortion payments within an ABMS

Diference between facilitation and extotion payments and how they should be managed in the context of an anti-bribery management system

What are the Prerequisite Programmes (PRPs) in ISO 22000 and why they are critical aspects of a food safety management system (FSMS)

Prerequisite programmes (PRPs) are essential elements of any effective food safety management system

So... what exactly is Responsible AI?

AI has the potential to solve some of humanity’s greatest challenges. But we must use it wisely.

What is an AI system impact assessment and why does it matter?

The AI system impact assessment is a key element of an AI management system according to ISO/IEC 42001. Why is it so important?

ISO/IEC 42001. The ISO standard for AI management - What it is and… what it is not

Thoughts on ISO/IEC 42001, the first international standard for artificial intelligence management systems

How much does ISO certification cost for my company?

Wondering how much ISO certification costs? It depends on your company’s size, complexity, and scope—get a tailored quote, avoid flat-rate scams

The two approaches for information security risk identification proposed by ISO/IEC 27005:2022

ISO/IEC 27005 proposes two different approaches for risk identification. The event-based approach and the asset-based approach

What is and what is not ISO 9001

ISO 9001, the most popular standard in the world, is a useful tool for any organization if applied correctly. However it is not a magic solution and there are many misconceptions about this standard