Category: Governance Risk & Compliance

Insights from Certification Body Auditors The transition from ISO/IEC 27001:2013 to ISO/IEC 27001:2022 marked an important evolution in information security management. The updated standard introduces revised clause structures and a…

For years, Governance, Risk, and Compliance (GRC) in Australia was often treated as a “check-the-box” exercise, a necessary but secondary function hidden in the back office. Australia’s governance, risk, and…

Overview Artificial Intelligence (AI) is reshaping how the payments ecosystem functions, from fraud detection and transaction monitoring to customer service and predictive analytics. While these technologies provide tremendous opportunities for…

Overview On 14 October 2025, ISO officially published ISO/IEC 27701:2025, the second edition of the Privacy Information Management System (PIMS) standard, marking a major evolution from the 2019 version. Previously…

Overview Artificial Intelligence (AI) is transforming the way payments are processed, verified, and secured. From fraud detection and behavioural analytics to transaction monitoring and customer verification, AI now sits at…

Overview Artificial Intelligence (AI) is reshaping the payment security landscape. From fraud detection engines to predictive transaction monitoring, AI is being deployed at scale in environments where cardholder data (CHD)…

Overview Effective network segmentation plays a critical role in managing the scope of PCI DSS compliance, providing assurance that sensitive cardholder data is protected. For service providers, where multiple environments…

Overview In today’s digital age, more people are opting for the convenience of electronic payments, with a growing trend of purchasing goods and services online. For businesses with websites, accepting…

Overview AI is transforming the way organisations approach data security by seamlessly integrating with ISO/IEC 27001 standards. While ISO/IEC 27001 offers a robust framework for managing information security risks, the…

P2PE: Version in Transition The PCI Security Standards Council (PCI SSC) has released an update to its Point-to-Point Encryption (P2PE) Standard, marking the arrival of P2PE v3.2. This minor revision…

ISO/IEC 27001 Audit Readiness Achieving ISO/IEC 27001 certification is a significant milestone for organisations committed to managing information security risks in a structured and globally recognised way. However, many businesses,…

New Timelines, Targeted Risk Analysis, and a Fresh Approach to Remediation The latest update to the Payment Card Industry Data Security Standard (PCI DSS) offers much-needed clarity around how organisations…