Insights
AdviseISO Updates
News and practical guidance on standards, management systems, auditing and compliance, published by AdviseISO.
Information security & AI
NIST opens consultation on adversarial machine-learning taxonomy focused on agentic systems
NIST’s draft adversarial-machine-learning taxonomy focuses on agentic systems. Comments close December 18, 2026, with no implementation deadline specified.
Environment & sustainability
ISSB opens nature-disclosure consultation: implications for UAE reporting teams
The ISSB’s nature-related disclosure consultation is relevant to UAE organizations using ISSB Standards, but it is not a new UAE reporting obligation. Comments close on 19 February 2027.
Compliance updates
EU Council backs methane-rule delays, but current deadlines remain the planning baseline
The EU Council supports delaying specified methane obligations by one year, but its negotiating position does not replace current compliance deadlines.
Information security & AI
NIST releases privacy-preserving machine-learning testbed and genomic benchmark
NIST’s new federated-learning testbed and soybean genomic benchmark support comparisons of privacy settings and model performance, offering assurance teams a resource for structured evaluation.
Implementation
Setting useful quality objectives—and following up on them
Turn quality objectives into decisions: define meaningful outcomes, establish reliable evidence, assign ownership and review whether actions actually improve performance.
ISO updates
ISO 9002 revision clears draft ballot; replacement guidance is not yet published
ISO’s quality-management committee reports 99% approval for the ISO 9002 draft. The milestone supports monitoring and preparation, not an immediate implementation or certification transition.
Information security & AI
Building an AI inventory: record the use, assign an owner and keep it current
Build a manageable AI inventory by recording business uses, assigning owners and making gaps visible—then define how entries stay current.
Environment & sustainability
EU advisory platform challenges proposed reporting boundaries for non-EU sustainability reports
The EU Platform on Sustainable Finance questions proposed ESRS-40a reporting boundaries for non-EU companies. Its recommendations are advisory, not new reporting obligations.
Compliance updates
Commission accepts Temu’s DSA corrective plan; implementation and audit still ahead
The European Commission has accepted Temu’s DSA corrective plan, but implementation and independent audit remain ahead. The case highlights the difference between approving measures and verifying their effectiveness.
Auditing
ISO publishes new defence technical-audit standard edition; correction pending
ISO has published a new edition of its defence technical-review and audit standard. Teams should check edition references and contractual authority while monitoring a forthcoming correction.
Information security & AI
NIST proposes design tenets for managing AI-agent identities and access
NIST’s proposed AI-agent identity tenets offer a basis for reviewing delegated access, revocation and oversight, without creating new compliance requirements.
Information security & AI
NIST finalizes post-quantum cryptography transition roadmap
NIST’s final post-quantum cryptography transition report gives migration planners a framework for assessing cryptographic uses, supplier dependencies and applicable federal milestones.