OCTOBER

FEATURE STORY

New NAID AAA Cybersecurity Requirements, Effective October 1

i-SIGMA added cybersecurity requirements to NAID AAA certification in version 1026O. They took effect on October 1, 2026, and your first audit after that date is when they will be enforced.

Every NAID AAA certified operation now needs documented cybersecurity policies under 1.29, covering acceptable use, password management and incident response, with a signed acknowledgment from each Access Individual. Facility-based operations also have an expanded 2.1, which now reaches physical access to servers, storage devices and network equipment.

If you hold an overwriting or degaussing endorsement, three more apply: 7.4 Workstation Access Control, 7.5 Identity Access Management, and 3.2, which requires an annual Security Risk Analysis performed by a competent third party.

Worth knowing what a miss costs. 2.1, 3.2 and 7.4 are all Level 3 specifications, and under i-SIGMA's terms a first instance of a Level 3 non-compliance carries a $1,000 fine.

Greeneye has the policy and procedure set built and mapped to each specification. Email Tom your next audit date and your endorsements, and he will confirm which of the five apply.

Tom@greeneyepartners.com

If you are auditing before the new year, this week is the right time.

NEXT STEPS FOR ISO 9001:2026

Currently certified companies can transition to ISO 9001:2026 at any time between now and Sept 2029. You can choose to do it at either a surveillance or a recertification audit.

Current Transition Timeline:

September 16, 2026: ISO 9001:2026 officially published.
March 30, 2028: Deadline for new ISO 9001:2015 certifications. After this date, PJR will only be able to issue new certifications against ISO 9001:2026.
September 30, 2029: Final deadline for all ISO 9001:2015 audit activity, including surveillance and recertification audits on existing certificates. Every certificate must transition to ISO 9001:2026 by this date, regardless of when it was originally issued.

If you would like more information on the changes, check out this webinar on ISO 9001 changes from PJR

Next Steps:

Decide when you will make your transition.
Contact Greeneye Partners 6 months before your transition audit for updated documentation and guidance.
Implement changes.

We are ready for ISO 9001:2026

Join us at the e-Scrap Conference:

Can Policy Unlock Better Plastics Recovery?

Plastics remain one of the toughest challenges in e-scrap recycling. This conference session brings industry leaders together to examine the technical, contamination, and market hurdles limiting recovery and to ask where policy can help move the needle.

From extended producer responsibility to emerging material standards, panelists will explore how regulation could reshape incentives and unlock solutions the market alone has struggled to deliver.

Moderator: Emily Farrant, Greeneye Partners

Panelists:

Clive Hess, President, CompuCycle
Megan Tabb, Commercial Director, Synergy Recycling/RePolyTex
Ken Thomas, President, Universal Recycling Technologies

Join us for a candid conversation about what’s holding plastics recovery back and what it will take to move forward.

Learn more about the e-Scrap Conference

Have any great tips that could help other facilities in the industry

and that you want to share? email us.

RESOURCES

THE GREENEYE RECALL LIST

We keep an ongoing Recall List, and now we are making it available to you! Use the resource below to keep your Recall List up to date.

Greeneye Partners provides a summary of some of the electronic recalls reported to the CPSC. If you would like to sign up to receive all the recalls for all the U.S. Consumer Product Safety Commission, CLICK HERE.

Greeneye Partners' Recall List

THE INDUSTRY'S MOST TRUSTED & EXPERIENCED SOURCE

Greeneye Partners was founded in 2010 with a focus on sustainability and risk management. We provide consulting, auditing, and training services for Information and Data Security (ISO 27001 & NAID), Quality Management (ISO 9001 & ISO 13485), Health and Safety Management (ISO 45001), Energy Management (ISO 50001), and Electronic Reuse & Recycling (e-Stewards, R2, and RIOS).

Together, our team has over 80 years of experience working with ISO and industry standards. The Greeneye Team participates in the development of industry standards, serves on advisory committees for e-Stewards, RIOS, and R2, and provides auditor training for all three standards. Please feel free to contact us for additional information.

Share This Email