Insights
AdviseISO Updates
News and practical guidance on standards, management systems, auditing and compliance, published by AdviseISO.
Compliance updates
EU Council backs national incident-reporting entry points in Digital Omnibus mandate
The EU Council favours national incident-reporting entry points in its Digital Omnibus mandate. The proposal remains subject to negotiations and does not change current reporting instructions.
Compliance updates
EU Council backs limited packaging EPR representative relief, but negotiations remain open
The Council supports limited relief from packaging EPR representative requirements for qualifying EU producers. The proposal remains under negotiation and does not authorise changes to current arrangements.
Auditing
Closing audit findings: separate correction, cause analysis and corrective action
A practical guide to separating correction, cause analysis and corrective action—and deciding what evidence supports closing an audit nonconformity.
ISO updates
How to turn a management system standard into a practical implementation map
Learn to distinguish requirements from recommendations, map statements to existing processes and check evidence before deciding that another procedure is needed.
ISO updates
Keep standards-development rules out of your implementation checklist
A practical reading workflow for keeping standards-development procedures separate from organizational requirements and locally chosen implementation practices.
Information security & AI
NIST opens consultation on an executive cybersecurity handbook aligned with CSF 2.0
NIST’s draft executive cybersecurity handbook follows CSF 2.0’s structure. Comments close December 4; practitioners can review leadership reporting without assuming new requirements.
Environment & sustainability
Choosing useful waste indicators: distinguish prevention, diversion and disposal
Build a waste dashboard that separates generation from destination, explains changes in output and turns uncertain data into practical follow-up actions.
Environment & sustainability
SBTi keeps financial institutions’ near-term target route available without a fixed end date
SBTi has confirmed that financial institutions can continue using its near-term target route without a specified end date. Target review responsibilities remain distinct.
ISO updates
ISO adopts Paris Statement: a resilience policy signal, not new audit requirements
ISO’s Paris Statement strengthens its focus on adaptation and resilience, but introduces no new audit criteria or certification transition deadlines.
Implementation
Writing procedures employees can use: start with the task, not the template
A practical workflow for turning process knowledge into clear procedures: map the task, choose the right format, explain decisions and test the result with users.
ISO updates
Preparing for the ISO/IEC 17065 replacement draft without assuming new requirements
ISO/IEC 17065 remains a replacement draft in the opened catalogue. Prepare monitoring and review activities without assuming new requirements or transition deadlines.
Information security & AI
EU cyber authorities urge immediate action on two critical PHP vulnerabilities
EU cyber authorities urge immediate remediation of two PHP vulnerabilities, including checks with hosting providers and suppliers whose products may contain PHP.