Operating Policies.
The operating principles Next Seven Again Pty Ltd works to, governed by the Policy Framework & Register. All twenty policies are drafted at v1.0, structured around our certification objectives: B Corp status, ISO/IEC 27001 (information security) and ISO/IEC 42001 (AI management).
Framework
Master Index · House StylePolicy Framework & Register Draft v1.0
The over-arching policy document – the master index, house style, ownership model and standards crosswalk mapping every policy to B Corp, ISO/IEC 27001 and ISO/IEC 42001.
Workplace & Conduct
People · B Corp Workers PillarEmployee Handbook Draft v1.0
How we work – employment basics, leave, flexible and remote work, expenses, tools, and who to ask about what.
Code of Conduct Draft v1.0
The behaviour we expect of everyone – respect, integrity, conflicts of interest, and consequences for breaches.
Work Health & Safety Draft v1.0
WHS obligations, hazard reporting, remote and field-work safety – including drone operations and site visits.
Diversity, Equity & Inclusion Draft v1.0
Fair hiring and pay, inclusive culture, and our specific commitments to First Nations participation and partnership.
Whistleblower & Grievance Draft v1.0
Safe, confidential channels to raise concerns – and the protections that apply under the Corporations Act.
Information Security & Technology
ISO/IEC 27001Information Security Policy Draft v1.0
The top-level ISMS policy – scope, objectives, roles and the statement of applicability that anchors ISO/IEC 27001 certification.
Acceptable Use & IT Policy Draft v1.0
Devices, accounts, passwords and MFA, software installation, and acceptable use of company systems and data.
Access Control Draft v1.0
Least-privilege access, joiner / mover / leaver process, and periodic access reviews across all core systems.
Data Classification & Retention Draft v1.0
How data is classified, handled, retained and destroyed – including customer geospatial data and culturally sensitive First Nations data.
Incident Response Draft v1.0
Detecting, containing, notifying and learning from security incidents – including OAIC notifiable data breach obligations.
Business Continuity & DR Draft v1.0
Keeping the platform and the business running – backups, recovery objectives, and continuity testing.
AI Management
ISO/IEC 42001Responsible AI Policy Draft v1.0
The top-level AI management policy – principles, scope, accountability and oversight for every AI system we build or use.
AI Risk & Impact Assessment Draft v1.0
Assessing AI systems for bias, environmental-claim integrity and community impact before deployment – and on every material change.
Model & Data Governance Draft v1.0
Lifecycle controls for models and training data – provenance, versioning, validation, monitoring and retirement.
AI Use Guidelines Draft v1.0
How staff may use assistants and generative tools day to day – approved tools, confidential data rules, and human review of outputs.
Ethics, Privacy & Sustainability
B Corp · Governance PillarPrivacy Policy Draft v1.0
Handling personal information under the Privacy Act and APPs – collection, use, disclosure, and individual rights.
Anti-Bribery & Corruption Draft v1.0
Zero tolerance for bribery and facilitation payments; rules for gifts, hospitality and dealings with public officials.
Environmental & Sustainability Draft v1.0
Our own footprint – emissions, procurement, travel and cloud usage – measured and reduced in line with our B Corp objective.
Supplier Code of Conduct Draft v1.0
The standards we hold suppliers and partners to – labour, environment, security and ethical sourcing.
Data Sharing & Indigenous Data Sovereignty Draft v1.0
Principles for open, transparent data sharing – and respecting First Nations ownership and control of data about Country.
Certification Objectives
- B Corp. Policies in the Workplace and Ethics sections map to the B Impact Assessment pillars (Governance, Workers, Community, Environment, Customers).
- ISO/IEC 27001. The Information Security set forms the core ISMS document suite; each policy will carry an owner, review cycle and version history.
- ISO/IEC 42001. The AI Management set forms the AIMS document suite covering our models, analytics and use of third-party AI tools.
- Every card opens its branded Draft v1.0 policy document. Link each to its Google Doc once uploaded and ratified.