#239 2025 ISO Standard Wrap Up and Looking Ahead

It's been a busy year for ISO Standards, with that set to ramp up in 2026 thanks to upcoming Standard transitions. Before we dive into a new year, we'd like to take a step back and highlight some of the key ISO milestones from 2025. In this episode, Steph Churchman, Communications Manager at Blackmores, looks back at the major Standard updates from 2025, including changes to existing Standards, new ISO's published and key upcoming changes you need to be aware of for 2026. You'll learn · What ISO Standards have been updated in 2025? · What new ISO Standards were published in 2025? · What Standards are due to be published in 2026? · What ISO transitions do you need to be aware of in 2026? Resources · Isologyhub In this episode, we talk about: [02:05] Episode Summary – Steph reviews major ISO Standard updates from 2025, including changes to existing ISO Standards, new Standards published and what you need to know going into 2026. [02:34] What ISO Standards have been updated in 2025?: ISO 27701:2025: This is the Standard for Privacy Information Management and it recently received an update in October 2025. Key updates to this Standard include: · This is now a stand-alone Standard and can be implemented without an existing ISO 27001 ISMS in place. · The addition of further guidance for data processors and controllers. · Provides greater clarity on managing personal data within AI and digital ecosystems · More focus on organisational leadership involvement. · The update now aligns ISO 27701 more closely with global regulations such as GDPR, CCPA and LGPD. ISO 37001:2025, the Standard for Anti-bribery. This one was well overdue an update, with its last version being 2016! It's update arrived on 2nd Feb 2025, and included: - · Text harmonisation with the other ISO 37000 family of Standards, such as ISO 37301 (compliance management systems), ISO 37000 (governance of organisations) and ISO 37008 (internal investigations of organisations) to ensure consistency and easier integration. · The latest version now formally introduces the concept of anti-bribery culture and emphasises its importance for the effectiveness of the management system. · A greater emphasis on the role of top management and their involvement in overseeing the management system. · A new requirement has been added for awareness and training as fundamental asset for management system results. · It also receives the added climate change amendment, which many ISO's already embedded back in 2024 – learn more about that here. · And lastly, there's more comprehensive definitions of conflict-of-interest as well as procedures to raise awareness on reporting potential and actual conflicts. ISO 50002, the standard for energy audits. This isn't a certifiable standard, but rather a guidance document to support the energy management standard ISO 50001. The recent update has now split this Standard into 3 parts: · ISO 50002 part 1: General requirements with guidance for use. · ISO 50002 part 2: Guidance for conducting an energy audit in buildings. · ISO 50002 part 3: Guidance for conducting an energy audit in processes Most of the revisions focused on strengthening and adding further clarification to energy auditing principles such as Competency, Confidentiality, Objectivity, access to equipment, resources and information, Evidence-based approach and Risk-based approach Lastly, this update also clearly specifies the requirements for energy auditor competence. [07:10] What new ISO Standards were published in 2025? ISO 42006 - Requirements for bodies providing audit and certification of artificial intelligence management systems. This is a guidance Standard that actually relates to certification bodies rather than businesses choosing to implement ISO 42001. It builds on ISO 17021-1 and ensures that certification bodies operate with the competence and rigour necessary to assess organisations developing, deploying or offering AI systems. While one that you as a business may not have to worry about, it's a positive addition to the growing ISO 42000 family of Standards, which are currently the only global frameworks for best practice for AI Management. ISO 17298 Biodiversity - Considering biodiversity in the strategy and operations of organizations. ISO 17298 ultimately aims to help organizations of all types and sizes understand how they depend on and impact nature – and take concrete action to address it. It includes guidance to help you: · Understand your biodiversity impacts, dependencies and risks · Identify opportunities for green growth and nature-positive finance · And develop and implement a credible biodiversity action plan [09:45] What new ISO Standards ...