Compliance changes, read by the people who implement them.
Notes from Whitesec ID in Jakarta and Whitesec AU in Perth on what changed in ISO 27001, ISO 27701, UU PDP, SOC 2 and the Essential Eight, and what to do about it.
Articles
- Australia
ASD Essentials is out. What it means for your Essential Eight programme
ASD has started publishing ASD Essentials, the evolution of the Essential Eight. What changes, what carries over, and what Australian organisations should do now.
Essential Eight
- Indonesia
PP 33/2026: Indonesia's personal data protection rules take effect on 16 January 2027
Government Regulation 33 of 2026 implements UU PDP (Indonesia Personal Data Protection Law). What it asks of controllers and processors, and how to prepare before 16 January 2027.
ISO/IEC 27701:2025
- Indonesia and Australia
ISO/IEC 27701:2025: a standalone privacy standard, and the 2028 transition
ISO/IEC 27701 is now a management system standard in its own right. What changed from the 2019 edition, and the dates certified organisations should plan around.
ISO/IEC 27701:2025 · ISO/IEC 27001:2022
- Indonesia and Australia
One record, every framework: running ISO 27001, ISO 27701 and SOC 2 without duplicate registers
Why organisations working on ISO 27001, ISO 27701 and SOC 2 keep one risk, supplier and incident register instead of three, and what auditors still expect to see.
ISO/IEC 27001:2022 · ISO/IEC 27701:2025 · SOC 2 Type II · Essential Eight
See your own registers in Whitesec One.
We walk through the workspaces for the frameworks you need, with the team in Jakarta or Perth.