Robert Lengyel

ISO certification isn’t the hard part in 2026. Keeping it is. There’s a clear shift happening. Businesses aren’t opting into ISO anymore — they’re being expected to have it. • ISO 45001 — because WHS and psychosocial risk are under real scrutiny • ISO 27001 — because data security is now a contract requirement • ISO 9001 & 14001 — because quality and environmental assurance still open doors What I see far too often? Systems built to get through an audit — not to stand up when it actually matters. I’ve spent 30+ years helping businesses across construction, manufacturing, infrastructure, transport and technology achieve ISO certification: ✔ First attempt ✔ Zero nonconformances ✔ In as little as 8 weeks — done properly, not rushed But getting certified is only part of the story. The real test is keeping it when: – Your team changes – The work ramps up – Auditors ask better questions – Regulators start paying attention I work closely with Australia’s leading ISO certification bodies, so systems are built to meet expectations — confidently and consistently. And let’s be clear: ☝ Anyone promising ISO certification in less than 8 weeks is selling speed, not substance. ☝ Strong systems take time — and they pay you back for it. I’ve helped multiple businesses not just achieve certification, but hold it, year after year. 👉 If ISO 9001, 14001, 45001 or 27001 is on your radar for 2026, let’s talk — before a tender, audit or regulator forces the conversation.

12

23 Comments

How do you defend your WHS program to a regulator? When the inspector arrives—or worse, when something goes wrong—most organisations default to paper. A shelf full of policies. A training matrix. A dusty risk register. But here’s the reality: Regulators aren’t just looking for documentation. They want to see how your WHS system operates—day to day, decision to decision. To truly defend your WHS program, you need to answer questions like: – Who actually owns each risk? – How do you verify controls are in place and working? – What happens when risks escalate? – How are psychosocial hazards tracked and responded to? Most importantly, they’ll ask: Does your system reflect what really happens at work? That’s the test—whether your WHS program is lived, not just logged. Too many organisations are stuck with inherited systems, patchwork governance, and under-resourced safety roles that can’t stretch far enough. Want to pressure-test your WHS governance before someone else does? At WHS Guard, we review, realign, and strengthen WHS systems so you’re not just compliant—you’re credible, confident, and regulator-ready. www.whsguard.com.au #WHSGuard #ExecutiveSafety #WHSLeadership #SafetyGovernance #ISO45001 #PsychosocialRisk #BoardAccountability

32

39 Comments

Good Governance versus Big and Complex Governance The myth, compounded by the NDIS Practice standards, is that “good governance” means thick manuals, expensive consultants, and complex systems. In reality, governance is about clarity, decision-making, accountability, and learning, and it can and should be scaled appropriately. The NDIS registration process is crippling small providers who support choice, control and innovation. Small providers are often exceptional practitioners, not necessarity business gurus. We need tools that help practitioners govern without becoming bureaucrats. We need registration and accreditation that truly relects the proportionallity of organisations. 

10

The Auditor-General for New South Wales, Bola Oyetunji, has presented for publication a report titled ‘Cyber security in Local Health Districts’. This audit assessed whether NSW Health is effectively safeguarding clinical systems, required to support healthcare delivery in Local Health Districts, from cyber threats. Read the report: https://bit.ly/4pxgzD4 #AONSW #audit #CyberSecurity #LocalHealthDistricts

31

1 Comment

Public Transport Layer Security (TLS) Certificate validity is shifting from 398 days to just 47. That’s a significant change for IT and security teams managing renewals manually. “New industry rules will force enterprises to renew security certificates eight times more often. Most organisations aren't ready.”- Chris Brace, Lead Architect, Spark. Chris breaks down in this article what’s changing, why it matters and what organisations should be doing now. Read the full article: https://lnkd.in/ex-ByNrg #SparkNZ #TLS

32

Who owns safety risk in your organisation? If your answer is “the Safety team,” it’s time for a reset. This visual breaks it down clearly: Everyone has a role in owning and managing risk—from the crew in the field to the boardroom. 🔧 Field Operators must follow controls and speak up. 👷‍♂️ Supervisors need to verify and enforce those controls. 📋 Project Managers are responsible for embedding them into planning and resourcing. 🏢 Executives must set expectations and hold the system accountable. This is shared accountability in action. Too often, risk is pushed down—or worse, sideways—until something fails. But when risk ownership is clearly defined across levels, you get: ✅ More reliable controls ✅ Faster responses to issues ✅ A culture where safety is lived, not just laminated Let’s stop asking “Who’s to blame?” Start asking “Who owns this risk—and what are they doing about it?” Because real safety culture starts with real ownership. #SafetyLeadership #JarahCorp #RiskOwnership #WHS #Accountability #SafetyCulture #VisibleLeadership #OperationalExcellence #HSE #HumanFactors #HighReliability #FrontlineLeadership

143

8 Comments

Another psychosocial hazard to consider. Here some guidance to consider. Examples of intrusive surveillance may include: Unreasonable level of supervision/oversight Tracking when and how much a worker is working through methods such as keyboard activity trackers Monitoring emails, files and internet use Covert surveillance by webcams on work computers Tracking calls and movements made by the worker using CCTV and trackable devices Technology that allows the PCBU to remote access (without worker knowledge/permission) and take screenshots of a workers’ computer GPS monitoring of workers’ movement in company vehicles for the purpose of work performance monitoring, as opposed to other reasons such as safety considerations Effects of intrusive surveillance The design and implementation of monitoring, as well as the management practices, procedures and policies associated with it, may influence the occurrence of psychological harm within the workplace. If the purpose of monitoring is unclear and not governed by an effective policy, these types of surveillance risk being perceived as excessive. Intrusive surveillance could lead to increases in: Work intensity Resistance or counterproductive workplace behaviour Stress Presenteeism Staff turnover It can also decrease productivity, job satisfaction and worker attachment to the organisation. Intrusive surveillance can have a negative impact on: Worker wellbeing Work culture Perceptions of privacy, fairness, and trust Autonomy and creativity Intrusive surveillance has the potential to exacerbate other psychosocial hazards such as remote and/or isolated work and low job control. This can create a workplace culture where workers feel undervalued, overly monitored, and lacking in autonomy. However, if surveillance is implemented as part of a balanced and well-considered safety management approach, it can offer benefits to employees, provided it is applied cautiously and tailored to the specific needs of an organisation. What are your thoughts on this hazard?

8

Qantas Got Breached — Could You Be Next? Qantas just confirmed a major data breach through a third-party vendor — exposing customer names, contact details, and Frequent Flyer info. This time it was Qantas. Next time, it could be your business. 🎙 In this special episode of Don't Be A Sitting Duck, I break down: ✔️ What actually happened in the Qantas cyber incident ✔️ The growing risk of vendor-related breaches ✔️ What YOU can do to protect your business from becoming the next headline 🎧 Listen on Spotify now: 👉 https://hubs.li/Q03vyC1W0 🛡️ If you’re not assessing your vendor risk, you’re ignoring one of the biggest threats to your business. #QantasDataBreach #CyberSecurity #VendorRisk #DontBeASittingDuck #CyberAttack #SmallBusinessSecurity #Podcast #National PC

10

Need free help with privacy requirements in your organisation? Good privacy practices brings many benefits for your business, including building consumer trust and confidence that you handle personal information safely and securely. So many businesses - big, small and micro - collect private information and are therefore subject to Australia’s privacy laws. A new free Privacy Foundations tool from the Office of the Australian Information Commissioner has been designed to help businesses embed a culture of privacy, and establish or improve privacy practices, procedures and systems. The tool will help you self-assess your organisation against some foundational privacy questions and provide practical examples of what good practice looks like to help you Questions cover core privacy practice areas and provide relevant examples. It takes about 15-20 minutes, and will give you a privacy maturity score and tailored recommendations. You can get the tool from the #PAW website at: https://lnkd.in/gsmAA27G This is a great help during #PrivacyAwarenessWeek - the annual event to promote and raise awareness of the importance of protecting personal information - this year 16 - 22 June with the theme: ‘Privacy – it’s everyone’s business’. Make it yours! #Privacy #EveryonesBusiness #SmallBusiness #Capability #ConsumerConfidence #Trust #Australia #PAW25 #InformationSecurity #SupportForBusiness

8

1 Comment

EVACUATION DIAGRAMS - WHAT ARE THEY GOOD FOR? At CAPACITY Building Emergency Management Pty Ltd we have shared with many clients that evacuation diagrams exist for two reasons. 1. Something to ignore 2. Something to vandalise Australian Standard AS 3745 requires facilities to display evacuation diagrams that show exit routes, fire equipment, assembly areas, and essential instructions. Facility managers and employers install them in visible locations such as corridors, foyers, and near exits to demonstrate compliance. From a regulatory perspective, these diagrams are easy for auditors to check their accuracy and placement. Diagrams must be displayed at a height that ensures it is readable by the general public including anyone in a wheelchair. But as you can see by this photo, this example is above my head and I'm 5'10 (1.78m) and this is not an isolated example. So much for audits! Clearly, compliance does not guarantee effectiveness. Evidence shows that when an actual emergency occurs, diagrams on the wall do little to shape behaviour. Behavioural Research: What People Actually Do Studies repeatedly highlight a gap between the intended use of evacuation diagrams and how people actually respond in emergencies. A study by Kobes, M., Helsloot, I., de Vries, B., & Post, J. (2010). Building safety and human behaviour in fire: A literature review. Fire Safety Journal, 45(1), 1–11. found that of 400 fire survivors, 92% were unaware of evacuation diagrams. Most followed familiar exits or moved with others rather than consulting diagrams. A Sydney Harbour Tunnel evacuation experiment confirmed this tendency: 75% of participants based their decisions on audio announcements, such as public address systems or radio. Only 13% used signage despite clear visibility. 94% admitted they followed others rather than making independent decisions. These findings, echoed in European and Asian transit studies, underline a consistent truth: people under stress rarely act with the logic that regulators assume. Instead, they rely on instinct, cues from others, and clear spoken instructions. This data supports that less time, effort and money spent on diagrams under the misguided expectation they increase safety, and more time, effort and attendance at training for your emergency Wardens is where measurable emergency capabilities are formed and safety increased.

19

7 Comments

🚗💺 ACCC opens consultation on Child Restraint Systems — suppliers, retailers & stakeholders, it’s your turn to weigh in. The mandatory standard for child restraint systems for use in motor vehicles has protected Aussie kids since 1978 — and now it’s under limited review. ⚙️ What the ACCC is proposing • Update references to the latest AS/NZS 1754:2024. • Allow dynamic referencing, meaning future voluntary-standard updates could flow automatically into the mandatory version after a 6-month review. • Keep existing variations and exclusions. This review is intentionally limited — it won’t alter the scope or core performance criteria. Bigger structural changes will wait for a full review later. 🧭 Why it matters If you’re in the business of supplying, importing or retailing car seats, boosters or accessories, these updates may affect: ✅ Product design and certification ✅ Testing protocols and labelling ✅ Stock transition planning Keeping up with standards evolution is essential — dynamic referencing could fundamentally shift how future compliance is managed. 🗓 How to contribute • Submissions close Friday 28 November 2025. • Use the ACCC Consultation Hub (takes about 30 minutes). • Upload supporting documentation (testing data, safety insights, cost impacts). 🚀 Why your voice matters Australian child restraint safety has led globally for decades — but alignment, flexibility, and clear transitions are key to keeping innovation viable. Let’s make sure the next version of this standard continues to protect children and remains workable for industry. Visit the hub: https://lnkd.in/gEYMqqQt Kidsafe Victoria Tim Wain Derek Wainohu Gail Greatorex #ProductSafety #ChildRestraints #ACCC #Compliance #ASNZS1754 #ChildSafety #Automotive #Retail #RiskManagement #Policy

14

Is your organisation ready for AASB S2 climate reporting? Australia’s sustainability standards set a new benchmark for corporate climate reporting. Our free checklist helps you assess your readiness, identify gaps, and build confidence ahead of your first reporting period. ✅ Covers all 149 disclosure requirements of AASB S1 and S2 ✅ Structured gap analysis tool ✅ Clear progress tracking. Find the link in comments to download now and stay on track with your climate-related disclosures. #SustainabilityReporting #AASBS2 #ClimateDisclosure #CorporateAccountability #ESG

10

1 Comment