Insights
AdviseISO Updates
News and practical guidance on standards, management systems, auditing and compliance, published by AdviseISO.
Information security & AI
NIST expands DevSecOps resources while agentic-AI work remains in planning
NIST has expanded its DevSecOps resources with SSDF mapping and implementation examples. Human-directed AI is demonstrated; agentic-AI work remains in planning.
Environment & sustainability
ESRS-40a consultation: how non-EU groups can plan their feedback
EFRAG’s ESRS-40a cost-benefit survey and technical consultation have different deadlines. Here is how potentially affected non-EU groups can organise their review.
Environment & sustainability
SBTi guide: how financial institutions can choose between near-term and net-zero target frameworks
SBTi’s opened guidance for financial institutions points to an important practical distinction: near-term target validation and net-zero target validation are separate framework routes with different scope and requirements. That choice can affect governance, coverage and implementation effort.
Auditing
Planning ISO 9001 transition audits: beyond the audit appointment
Plan an ISO 9001 transition beyond the audit appointment: confirm the applicable arrangements, compare audit routes and allow time for decisions and certificate issuance.
Implementation
ISO/IEC 38501-1:2026 published as new guidance on implementing governance of IT
ISO/IEC 38501-1:2026 was published on 7 October 2026 as a new International Standard giving implementation guidance for governance of IT, with a focus on activities, supporting arrangements and stakeholder responsibilities.
ISO updates
ISO and UNDP publish ISO/UNDP 53001:2026 for SDG management systems
ISO and UNDP launched ISO/UNDP 53001:2026 on 28 September 2026, introducing a published International Standard for managing action on the Sustainable Development Goals through a formal management-system approach.
Implementation
Welcome to AdviseISO: a place to learn, question and share
A new home for practical ISO insights, compliance updates and conversations with people who work with management systems.