Preparing for ISO 9001:2026: Your Practical Transition Action Plan

ISO 9001:2026 publication is anticipated in September 2026, and your ISO 9001:2026 transition plan should start today, not at the deadline. Organizations with a clear action plan will find the shift smooth and even beneficial; those that wait will scramble. This guide walks you through seven practical steps to close the gaps, secure leadership buy-in, […]

Mandatory Sustainability Reporting in the Philippines: What PLCs and LNLs Need to Prepare For

On December 22, 2025, the Securities and Exchange Commission (SEC) issued the guidelines for Memorandum Circular No. 16, series of 2025, formally adopting the Philippine Financial Reporting Standards (PFRS) S1 and S2. These standards align with the International Sustainability Standards Board (ISSB) global framework for sustainability disclosures.  With this adoption, sustainability reporting is no longer […]

ISO/IEC 27701:2025 Released — Privacy Management Becomes a Standalone Standard

ISO/IEC 27701:2025

A major update redefining how organizations certify privacy governance On October 14, 2025, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) released the new edition of ISO/IEC 27701 — a landmark update that redefines privacy governance worldwide. The ISO/IEC 27701:2025 standard introduces a pivotal change: organisations can now implement and certify […]

Beyond Filing: How Compliance Can Drive Growth and Governance

For Philippine companies, fulfilling SEC mandates like filing General Information Sheets (GIS), Audited Financial Statements (AFS), and preparing for mandatory sustainability reporting (on the near horizon) is just the baseline. The real opportunity lies in transforming these disclosures into levers for growth, governance, and enduring trust. Forward-thinking organizations realize that compliance isn’t merely about avoiding […]

Breaking Down Barriers: How a standalone Privacy Information Management Systems (PIMS) and ISO 27701 will simplify privacy management

In an era where data is often described as the “new oil,” organizations worldwide grapple with an ever-expanding landscape of privacy regulations. In the Philippines, the Data Privacy Act of 2012 (RA 10173) imposes strict requirements on how personal information is collected and processed; additionally, regulations from other parts of the world, such as the […]

Importance of Governance, Risk and Compliance (GRC)

by Swapnil Bora, Practice Lead In the current scenario, the importance of governance, risk and compliance management is at its highest due to complex nature of business models and operations across the organization. An organization always faces risks that it will be found in violation of one or another of multiple laws and regulations. Lack […]

Understanding Data Privacy Act of 2012

Discover the essentials of the Data Privacy Act of 2012 (Republic Act No. 10173), a pivotal legal framework designed to protect personal information in both public and private sector information systems. Gain valuable insights into key terms, compliance requirements, and potential penalties, ensuring organizations are well-informed and prepared to navigate the intricate realm of data protection regulations.

ISO 45001 – Embedding Safety Culture Towards a Healthier Workplace

The Way of Work According to the International Labour Organization (ILO), over 2.78 million people still die each year from a work-related illness or injury, aside from the thousands of life-changing industrial diseases and injuries suffered by workers on a daily basis. While this obviously has an enormous impact on families and communities, the cost […]