Effective decision-making starts with understanding and navigating uncertainty. Rather than reacting to unexpected operational challenges after they happen, forward-thinking organizations prioritize proactive strategy to protect their operations and drive sustainable growth.

We recently hosted a practical, hands-on training session on Risk Management (ISO 31000:2018), bringing together professionals eager to enhance their risk assessment capabilities and implement global best practices within their workplace.

What is Risk Management (ISO 31000)?

ISO 31000 is the internationally recognized benchmark for risk management. It provides a clear, structured framework that helps organizations identify, evaluate, and prioritize operational and strategic risks.

By adopting the ISO 31000 guidelines, companies can:

• Improve Strategic Decision-Making: Align risk management directly with long-term business goals.
• Build Operational Resilience: Mitigate potential disruptions before they affect operations.
• Promote a Risk-Aware Culture: Equip employees at every level to recognize and address challenges early.

Workshop Highlights

The training session focused on practical execution, giving participants actionable skills they can apply immediately within their organizations:

• Framework Application: Understanding how to integrate ISO 31000 principles into everyday governance and operational workflows.
• Risk Assessment & Analysis: Using structured techniques to analyze internal and external factors, assess probability and impact, and establish risk mitigation plans.
• Collaborative Problem-Solving: Working through business scenarios to refine strategic planning and operational controls.

The session provided a collaborative platform for representatives across different companies to exchange insights, strengthen their risk management skills, and drive organizational excellence.

Upskill Your Team with Custom Risk Management Training

Building a resilient business requires continuous learning and alignment with recognized industry standards. Whether you are aiming to strengthen your internal risk framework or improve team capabilities, structured corporate training provides the foundation for long-term success.

Looking to implement Risk Management (ISO 31000) in your organization?

Contact us today to explore our training programs and customized workshops.

The revised environmental management system standard ISO 14001:2026 has reached its final revision stage, with the Final Draft International Standard (FDIS) now released for member ballot.  

Publication is expected in April 2026. Organizations certified to ISO 14001 are at a crucial crossroads due to evolving environmental challenges and upcoming amendments. Understanding the anticipated changes is essential for EHS managers and business leaders. 

Some Main Anticipated Changes 

• Enhance Life Cycle Perspective 

Stronger emphasis on life cycle thinking when identifying environmental aspects 

• Clarified Risk Management 

Restructured requirements for assessing risks and opportunities 

• Broader Environmental Context 

Expanded analysis beyond climate change to include pollution levels, biodiversity, and natural resource availability 

Preparation Steps 

1. Conduct a Gap Analysis 
Evaluate how the upcoming amendment affecting your current Environmental Management Systems and document the plan to address these changes 

2. Integrate EMS with Business Strategy 
Ensure that environmental objectives are aligned with your overall business goals, making sustainability a core focus 

3. Examine Your Supply Chain 
Assess the environmental impacts associated with both upstream suppliers and downstream customers 

4. Train Internal Auditors 
Equip your auditors with the necessary skills to assess performance and compliance in relation to environmental challenges. 

Conclusion 

Preparing for the evolution of ISO 14001 is not merely about compliance; it represents a significant opportunity to enhance sustainability and resilience within your organization. Engage your team in these discussions now to ensure readiness for the upcoming changes. 

Disclaimer: ISO standards are subject to ongoing review. Always refer the latest publications from ISO for current updates. 

Many workplaces see HIRADC (Hazard Identification, Risk Assessment and Determining Control) as just another compliance step but it’s actually the foundation of a safe, well-managed workplace. When hazards are missed, even small oversights can lead to stress, accidents, or worse.

We were delighted to have our principal trainer, Cheryl Teoh, invited by DQS to deliver a webinar on “Hazard Identification, Risk Assessment & Determining Control (HIRADC)” on 14 November 2025. This session helped participants understand what HIRADC really means, how to identify and evaluate risks, and how it connects with ISO 45001 requirements.

We thank all participants for joining and hope the insights shared will help organizations strengthen workplace safety and risk management practices. For those interested in exploring HIRADC further, our comprehensive training course is available for more in-depth learning.

Sustainability is transforming the way hotels operate today. More travelers are choosing to stay in places that care for the planet, value local communities, and preserve cultural heritage. To guide this global shift, the Global Sustainable Tourism Council (GSTC) has established internationally recognized standards for responsible tourism. 

Building on our experience in delivering sustainability training and consultancy for hotels – including The RuMa Hotel and Residences, the first GSTC-certified hotel in Peninsular Malaysia, we later developed this specialized program, Pathway to Sustainable Hospitality – Aligned with the GSTC Hotel Standard. 

Now as a member of the GSTC, we continue to align closely with its principles. This program is designed around responsible management, social impact, and environmental care, offering a practical, experience-based learning journey that equips hotels with actionable insights and proven methods to start or strengthen their sustainability efforts with clarity, confidence, and purpose.

On 1st and 2nd July 2025, Sincera GSE Consulting delivered a SMETA Requirements Interpretation training for Safeguards Secure Solution’s core team, supporting their efforts to strengthen ethical trade and sustainability practices.

This interactive two-day training course was filled with active discussions, hands-on activities, and participant-driven sharing of insights and experiences. By the end of the sessions, participants walked away with: 

• A clear understanding of the SMETA framework and its purpose 

• Insights into the differences between 2-pillar and 4-pillar audit structures 

• Practical tips on interpreting code requirements in labour standards, health & safety, environmental responsibility, and business ethics. 

With over 30 branches, 5,200 employees, and a fleet of 500+ armoured vehicles serving thousands of facilities nationwide, Safeguards Secure Solution brings decades of experience in delivering trusted cash and security services in Malaysia. We wish Safeguards continued success as they build on this training to strengthen their sustainability and compliance efforts! 

In conjunction with National Training Week (NTW) 2025, Sincera hosted a short but impactful session on Hazard Identification, Risk Assessment & Risk Control (HIRADC) on 17^th June 2025. We’re grateful to everyone who joined and participated actively.

The session was led by Cheryl Teoh, who walked us through what workplace hazards look like, how to identify them, and why it’s so important to think ahead when it comes to safety. From real case studies to practical tips on risk evaluation, it was a solid reminder that keeping ourselves and others safe starts with awareness.

 

Thanks again to all who took part in making safety a shared priority. Let’s keep the “think safe” mindset going!

Key Takeaways – Malaysia PDPA (Amendment) 2024
Personal Data Protection Act (Amendment) 2024 has been passed in the Malaysian Parliament since July 2024. In brief, the PDPA 2010 [Act 709] applies to personal data in commercial transactions. This includes any commercial transaction involving the supply or exchange of goods or services, agency, investment, financing, banking, and insurance, but excludes credit reporting businesses under the Credit Reporting Agencies Act 2010. One of the key highlights of the amendment is the appointment of the Data Protection Officer (DPO).

Data Controller vs Data Processor
A company which is data controller or data processor, or both requires to appoint DPO based on the guideline of the appointment. Firstly, a “Data Controller” is an individual or organization that processes, controls, or authorizes the processing of personal data. Meanwhile, a “data processor” are those who handle personal data for a data controller but doesn’t use the data for their own purposes and isn’t an employee of the data controller.

A person or entity is a “Data Controller” if they fall into any of the 13 class of data controllers. For instance, the industry of communications, banking and financial institutions, insurance, health, tourism and hospitality etc.

Furthermore, regarding the appointment of DPO – data controllers and/or data processors must appoint one or more DPO in any case where processing involves:

• Personal data exceeding 20,000 data subjects;
• Sensitive personal data, including financial information, exceeding 10,000 data subjects; or 
• Activities that require regular and systematic monitoring of personal data.

Timeline for enforcement and transition period of the PDPA Amendment 2024

For better understanding of your business nature whether yours is a data controller or data processor, you may contact Personal Data Protection Commissioner Office or refer to the PDP Act 2010 with the amendment 2024 and Personal Data Protection (Class of Data Controllers) with the amendment order 2016.

Meanwhile, we’re here to assist you to stay in compliance as we offer:

• Gap Assessment: Address existing gaps in data protection to better safeguard sensitive information. 
• Data Protection Training & Advisory: Guide organizations on PDPA compliance and implement good data protection practices including DPO training.

SMETA 7.0 introduces significant changes to Workplace Requirements, integrating a management system-based approach to better identify supply chain risks, strengthen sustainability commitments, enhance resilience, and ensure compliance with regulatory standards.

Enhanced Workplace Requirements

One of the major updates in SMETA 7.0 is a more detailed and structured Workplace Requirements framework, which breaks down the ETI Base Code and Sedex additions into specific, auditable elements. Each requirement now demands clear documented evidence, making audits more transparent and structured.

In addition to compliance with the ETI Base Code and local legislation, the updated framework provides precise guidelines on what auditors should check. This shift strengthens worker protection by ensuring thorough and consistent assessments.

A Shift to a Management System-Based Approach

Unlike previous versions that primarily focused on audit-day conditions, SMETA 7.0 introduces a management system-based approach that systematically examines a company’s management structures. This method helps:

• Identify root causes of recurring issues
• Detect early-stage risks before they escalate
• Implement long-term corrective actions

This approach evaluates four key areas:

1. Not Addressed – No documented policies exist, or existing policies contradict Workplace Requirements.
2. Fundamental Improvements Required – Policies are undocumented or vague, making compliance unsustainable. Gaps have already led to major or critical non-compliances (NCs).
3. Some Improvements Recommended – Policies exist but contain unclear details, minor gaps, or inconsistencies. Oversights may have led to isolated NCs or could do so in the future.
4. Robust Management System – Policies are well-documented, site-appropriate, and systematically implemented. Procedures are regularly reviewed and updated to ensure sustainable compliance.

Stronger Collaborative Action

Another key update is the introduction of “Collaborative Action Required” findings for complex issues that suppliers cannot resolve alone. These findings require cooperation between suppliers, buyers, and external stakeholders such as NGOs and trade unions. This applies to critical concerns like:

• Living Wages
• Responsible Recruitment
• Child Labor
• Discrimination

Struggling to Meet SMETA 7.0 Compliance?

Ensuring compliance with SMETA 7.0 can be challenging, but we’re here to help. Our comprehensive training and consultancy services will:

• In-Depth Training Programs – Equip your team with the latest SMETA knowledge.
• End-to-End Consultancy Support – From gap assessments to on-site guidance and post-audit corrective actions, we help you achieve seamless compliance.
• Customized Compliance Strategies – Tailored solutions to address your specific challenges, ensuring long-term sustainability and continuous improvement.

Equip your employees with the knowledge and skills they need to meet SMETA 7.0 standards and drive workplace sustainability. Contact us today to get started!

On 5–6 November 2024, the Malaysia Employers Federation (MEF) hosted the Hoteliers Conference 2024, bringing together a diverse gathering of industry leaders and professionals to address evolving workplace HR and hospitality trends. Sincera was thrilled to participate, showcasing our expertise at our exhibition booth and connecting with hoteliers from across the industry.

Sustainability Takes Center Stage

The conference provided a fantastic platform to introduce the GSTC Standards to numerous hoteliers, fostering awareness and encouraging the adoption of eco-friendly practices.

A major focus of the conference was sustainability—a transformative trend reshaping the hospitality landscape. A standout example is The RuMa Hotel and Residences, the first hotel in Peninsular Malaysia to earn certification from the Global Sustainable Tourism Council (GSTC). Their achievement, which Sincera proudly supported, reflects a commitment to sustainable practices, from educating staff and guests to supporting local communities and conserving the environment.

Be Part of the Sustainable Future

Sustainability is no longer just a trend; it is a necessity. Hotels embracing sustainable practices not only contribute to environmental preservation but also meet the growing expectations of today’s eco-conscious travellers.

Join our course to dive into sustainable hotel practices, learn how to apply the GSTC Criteria, and discover the benefits of certification. Together, let’s set new benchmarks for excellence in hospitality.