Insights
AdviseISO Updates
News and practical guidance on standards, management systems, auditing and compliance, published by AdviseISO.
Information security & AI
NIST opens consultation on a CSF 2.0 profile for federal O-RAN deployments
NIST’s draft CSF 2.0 profile for federal O-RAN deployments is open for comment until November 2. Teams can review its risk-management mappings without treating them as final requirements.
Environment & sustainability
GHG Protocol clarifies that forest carbon accounting methodology remains unresolved
GHG Protocol has not approved either proposed forest carbon accounting method. Its October clarification explains what remains unresolved and why reporting teams should check their disclosure language.
Compliance updates
When regulation references a standard: a practical compliance-register workflow
When regulation references a standard, record the mechanism, edition and applicability evidence before assigning a compliance obligation.
ISO updates
Implementation or certification? How to plan the two decisions separately
Implementation and certification are separate planning decisions. Learn how to define useful improvements while checking what external evidence your organization needs.
Implementation
ISO 20001:2026 published: where food businesses can start implementation
ISO 20001:2026 introduces requirements for food loss and waste management. Early implementation work can focus on scope, measurement, responsibilities and evidence before conformity claims.
Information security & AI
NIST finalizes token-protection guidance: what to review with cloud providers
NIST’s final token-protection guidance updates signing-key protection, validity decisions and workload identity recommendations. Here are practical questions for a focused cloud-control review.
Environment & sustainability
GRI streamlines Sector Standards development: what reporting teams should know
GRI’s streamlined Sector Standards model will identify likely material topics and point to existing Topic Standards, without developing additional sector-specific disclosures.
Environment & sustainability
GHG Protocol AMI feedback supports separate reporting statements, not immediate rule changes
GHG Protocol’s AMI feedback summary shows strong respondent support for separate reporting statements, alongside concerns about inventory integrity, double counting and evidence quality.
Compliance updates
EU tax-list changes: how to update compliance controls without assuming immediate relief
A practical approach to reviewing EU tax-list changes: separate publication from national application, preserve annex distinctions and document control decisions.
Information security & AI
CRA reporting readiness: dates, awareness timestamps and final-report follow-up
CRA reporting duties apply before the regulation’s wider requirements. Manufacturers should review existing products, preserve awareness timestamps and track distinct final-report deadlines.
Auditing
ISO 14001:2026 transition rules: audit options and certification deadlines
Global ACI’s ISO 14001:2026 transition framework sets certification milestones and conditions for transition audits, additional audit time and remote delivery.
ISO updates
ISO adopts Paris Statement on climate adaptation, resilience and nature
ISO’s Paris Statement emphasizes climate adaptation, ecosystem resilience and nature preservation. It signals strategic priorities, not new certification requirements or transition deadlines.