Contact

What are you looking for?

Protecting Food Systems from Intentional Harm through ISO/IEC 27001

The ANZ food industry is rapidly digitising, with AI, automation and interconnected supply chains now central to operations. While these technologies drive efficiency and innovation, they also introduce new vulnerabilities that can directly impact food safety, traceability and regulatory compliance.

This webinar explores how organizations can protect their food systems from intentional harm by strengthening information security and governing AI responsibly. It focuses on the practical application of ISO/IEC 27001 (Information Security Management Systems) and ISO/IEC 42001 (Artificial Intelligence Management Systems) and how these standards can align with established food safety frameworks such as HACCP and FSANZ requirements.

Attendees will gain a clear understanding of emerging risks, including cyber threats, data integrity failures and AI-driven decision risks and how to address them through an integrated governance approach. The session will demonstrate how to move from reactive responses to proactive resilience, while building trust with customers, suppliers and regulators.

Why should attend

To equip food industry professionals in ANZ with a practical framework for managing information security and AI-related risks, by:

  • Demonstrating how ISO/IEC 27001 and ISO/IEC 42001 can be integrated into existing food safety and risk management systems
  • Highlighting the direct link between cybersecurity, data integrity, AI governance and food safety outcomes
  • Providing actionable strategies to strengthen resilience, ensure compliance and enhance stakeholder confidence
  • Supporting organisations in building a competitive advantage through demonstrable assurance and best-practice governance

Agenda

  • Introduction and Industry Context
  • Emerging Risks in Modern Food Systems
  • Understanding the Standards
  • Integrating with Food Safety Frameworks
  • Practical Implementation Strategies
  • Key Takeaways and Q&A

Who should attend

This webinar is ideal for:

  • Food & Beverage executives and business owners responsible for strategy, risk and customer trust
  • Operations, manufacturing and quality leaders working with OT environments and AI-enabled automation
  • Supply chain, logistics and procurement managers managing third-party data, platforms and partners
  • IT, cybersecurity and information security teams (CIO/CISO, security managers, architects and engineers)
  • Risk, compliance, governance and internal audit professionals supporting ISO certification and regulatory readiness

Watch the webinar on demand or scroll down for key takeaways and Q&A with our speakers.

Key takeaways

  • Cyber Safety Parallels
    Treat cyber resilience like a food safety program, because digitized “paddock to plate” operations mean a hacked system can break CCP monitoring, traceability and recalls just as fast as a broken chiller can

 

  • Ransomware Reality Check
    Plan for ransomware as a when-not-if event, since 2025 saw a 32% YoY rise to 7,419 documented incidents, an average breach cost of $2.55M and food/manufacturing taking 50–56% of the hits

 

  • JBS Chaos Lesson
    Use the JBS incident as your cautionary tale: one ransomware attack shut 47 Australian plants for three days, wiped ~20% of daily beef/pork capacity and cost about US$11M (plus the “good luck explaining that” downstream chaos)

 

  • Tame The AI
    Don’t let AI quietly drive the forklift into a wall - protect against data poisoning, model drift/bias and AI-powered phishing by keeping humans in the loop and continuously monitoring AI used in quality and safety decisions

 

  • ISO Governance Mashup
    Build governance with ISO 27001 (information security) and ISO 42001 (AI management) mapped to HACCP/SQF/ISO 9001, focusing on relevant controls, tightening third-party oversight (“know your neighbor”) and proving trust with transparent practices instead of marketing confetti

Q&A with the speakers 

Yes. In many ways, ISO 9001 is considered the foundation for many management system standards. There is significant alignment between ISO 9001 and ISO 27001, particularly in the governance and management system requirements.

Both standards are structured into clauses and there are corresponding clauses that align across the two frameworks. As a general guide, around 50% to 60% of ISO 9001 requirements are aligned with ISO 27001, with some overlap also extending to ISO 42001.

For organizations that are already certified to ISO 9001, implementing ISO 27001 is typically not a major leap. The key difference is that ISO 27001 introduces additional information security requirements and technical controls that organisations need to address.

This is a very relevant question. When considering information security, it's important to understand that an information asset can exist in many forms. It may be a video, a Word document, a digital file, a printed document or even handwritten notes.

From an information security perspective, all of these formats are considered information assets. If a record contains sensitive information, its protection should be determined by your organization's information classification requirements, business needs and any applicable regulatory obligations.

In other words, the need to protect information is the same regardless of whether it is stored digitally or physically. If physical records contain sensitive information, they should be protected appropriately, just as digital records are. The focus should be on safeguarding the information itself, regardless of the format or medium in which it exists.

About SGS

SGS is the world’s leading Testing, Inspection and Certification company. We operate a network of over 2,500 laboratories and business facilities across 115 countries, supported by a team of over 100,000 dedicated professionals. With more than 145 years of service excellence, we combine the precision and accuracy that define Swiss companies to help organizations achieve the highest standards of quality, compliance and sustainability.

Our brand promise – when you need to be sure – underscores our commitment to trust, integrity and reliability, enabling businesses to thrive with confidence. We proudly deliver our expert services through the SGS name and a portfolio of trusted specialized brands, including Applied Technical Services, Brightsight, Bluesign and Nutrasource.

SGS is publicly traded on the SIX Swiss Exchange under the ticker symbol SGSN (ISIN CH1256740924, Reuters SGSN.S, Bloomberg SGSN SW).

Related Webinars

News & Insights

  • SGS - New Zealand - Auckland

Tenancy A, Level 5, Building 3, Central Park,

660 Great South Road, Ellerslie,

Auckland, New Zealand