The Blog

Privacy by Design

The Office of the Privacy Commissioner recently implemented an incentive called the “Privacy Trust Mark”, which is an accreditation given to organisations/agencies who demonstrate excellent privacy standards for a specific product, service or process. The OPC is assessing the applications based on the 7 principles of ‘Privacy by Design’ that were created by Dr Ann Cavoukian (Information & Privacy Commissioner, Ontario, Canada). This is a brief run through in case you believe your organisation is up for the challenge.

Read More

New Privacy Bill

After 25 years the New Zealand Privacy Act is finally getting an update! It is based on 2011 recommendations from the Law Commission’s review. The new bill has just been released on 20th March and the act will come into force on 1st July 2019.
Read More


Cyber Smart Week – Practical Security

Getting the basics right

Getting practical security information and guidance shouldn’t be so hard. Unfortunately, sometimes it can feel that way. Yes, there may be times when you will need to bring in specialists to assist your business to meet its security needs, but there are many aspects of security which you can choose to do, even on the leanest of budgets.

Read More


Axenic to work with the NZ Government to improve information security

Axenic has been selected for the new ICT Security and Related Services (ICTSRS) panel to provide governance, risk and assurance services to the New Zealand Government.

Axenic has worked closely with the NZ Government Chief Information Officer (GCIO) over several years to improve NZ Agency security maturity. This has included contributing to the development of the GCIO risk management framework, the GCIO assurance framework and the Office 365 and Azure Risk Assessments. Read More

From Chaos to Conformance: 4 Context of the organisation

Information security is all about context!

In my previous two articles in this series focused on developing an Information Security Management System (ISMS) based on ISO 27001:2013, I presented the common myths associated with the standard. In this article, I am going to provide an overview of the standard and section 4 Context of the organisation.

Read More