Things from AmpliFlow.se you definitely missed — October 2025

Written By
Patrik Björklund
Patrik Björklund
Published
November 5, 2025
Topic
Nytt

As autumn darkness settles over Sweden and the wet weather arrives, it's a good time to work on your management system. (AmpliFlow helps with a lot — but unfortunately not with Swedish autumn weather. Yet! Keep an eye on the changelog.)

From early October to early November 2025 we published a lot of items on AmpliFlow.se that aren't full articles. See below for details about:

Four new implementation guides

Operational risk management — for all ISO standards

On 5 November we published a Guide to operational risk management in AmpliFlow. It covers how to use AmpliFlow's risk management module to meet the risk requirements in ISO 9001, ISO 14001, ISO 27001 and ISO 45001.

The guide walks through the whole process from identification to monitoring. You'll learn the "What if…?" method for systematically finding risks in your process maps, how the system automatically calculates risk scores and colour-codes risks (red = must be addressed, yellow = acceptable with measures, green = acceptable), and how to set concrete actions with estimated probability reduction.

Joakim Stenström, Senior Consultant at AmpliFlow, explains the value: "Risk management is like the brakes on your car — their purpose is to let you drive fast in a safe way."

The guide also shows practical links: use impact ratings for information classification under ISO 27001, check at each non-conformity whether the risk had been identified, and set risk-reduction targets to follow up in management review.

Structured performance reviews

On 29 October we published the Guide to performance reviews in AmpliFlow. It shows how to run structured performance reviews directly in the system.

AmpliFlow provides a ready-made template and the tools so you can customise it to your needs. Add different activity types: text fields for comments, task lists for development actions, dropdowns for engagement ratings, and links to the competence register for development needs.

The guide includes 15 concrete example activities other customers have used successfully: follow-up from the previous review, engagement rating, goal achievement, role expectations, self-assessment against the job description, task list for actions and scheduled date for the next review.

Because performance reviews relate to ISO 9001 (competence and employee engagement), you'll get both better structure for the conversations and documentation that meets the standard's requirements.

Environmental aspects according to ISO 14001

On 16 October we published the Guide to environmental aspects in AmpliFlow. It is aimed at organisations that have, or are implementing, ISO 14001.

An environmental aspect is a part of your operations that affects or can affect the environment — energy use, waste, emissions, chemical use. Significant environmental aspects are those with substantial environmental impact and therefore need to be prioritised.

AmpliFlow offers predefined environmental aspects based on common industries. You filter to find relevant aspects, collect concrete measurements (kWh, kg waste), assess risk classification and identify which aspects are significant for your organisation. The guide shows how to link aspects to processes and environmental objectives, plus practical tips such as copying invoices for exact figures and involving the right people from production and purchasing.

ISO 27001 Annex A — all 93 security controls

On 9 October we published the Guide to ISO 27001 Annex A controls in AmpliFlow. It's aimed at those working with information security under ISO 27001.

AmpliFlow has all 93 Annex A controls preconfigured in the system. Each control includes implementation checklists showing exactly what you need to do, example text for both internal operational documents and the SoA (Statement of Applicability), and ready-made columns to link to your actual documentation and tools.

The guide explains an important distinction: the SoA should be high-level and generic (showing WHAT you do for external auditors and customers), while internal documentation should be detailed with step‑by‑step instructions, technical details and system names. Keeping the SoA generic protects sensitive information while still demonstrating compliance.

Two new knowledge base articles

Permissions for folders, pages and files

On 5 November we published Guide: Permissions for folders, pages and files in AmpliFlow. It explains how to control who can read, edit and delete content in the document control area.

The system has three permission levels: Reader (read-only), Editor (can create and modify content and view permissions), and Owner (can also change permission settings and delete content). Permissions are inherited down the folder structure unless you set unique permissions.

The smart part: folders with unique permissions are marked with a padlock icon so you can see them at a glance. If you give someone access to a subfolder without granting access to parent folders, the subfolder automatically "jumps" up in the structure so the user can find it. The guide shows step‑by‑step how to set base permissions for the Pages function and how to configure unique permissions on specific folders. This is especially relevant for ISO 27001 (access protection) and GDPR (access control).

Feature management in AmpliFlow

On 16 October we published Guide: Feature management in AmpliFlow. It shows how to keep your system tidy by activating only the modules you actually need.

The guide explains the difference between enabling a feature (making it available) and assigning permissions (deciding who sees it). When you disable a feature it disappears from the menu, but the data remains — if you enable the feature later everything comes back.

Practical tips: the guide contains example configurations showing exactly which modules to enable for different company types. Manufacturing companies with ISO 9001 and 14001 should enable Process Maps, Procedures/Checklists/Forms, Non‑conformity Management, Risk Management, Environmental Aspects and Objectives/Targets. IT companies with ISO 27001 should enable Information Classification, Legislation Management, ISO 27001 Annex A controls, Risk Management and ISO audits. Complete with instructions on where to find the settings and how to check which features are enabled.

Five weeks of improvements in the changelog

From late September to early November we published five weekly release notes with concrete improvements. Here are some examples:

29 September–5 October: Clearer user initials in avatars (Eva‑Lotta Olsson becomes ELO), ability to fix formatting issues directly in text fields, faster checklist report searches and a more stable date picker.

6–12 October: Rich text formatting for Text Activities (headings, bold, lists), colour‑coding for stakeholder interest levels, ability to toggle the Pages feature from tenant settings, and e‑mail notifications about improvement suggestions that now include the improvement number in the subject line.

13–19 October: Autofocus on the search field and the first required field when opening lists and forms (checklists, tasks, improvements, pages, objectives, customers, suppliers, etc.), a print button for improvement suggestions with a cleaner layout, and more stable behaviour when editing improvements.

20–26 October: Training plans now show users with avatars instead of name lists, removal of an extra "Complete step" question when all activities are done, improved PDF reporting with clearer preview and default footer.

27 October–2 November: Improved permission control in Pages with clear visual indicators for custom permissions and a history of permission changes, folder selection that respects read‑only folders, search highlighting that now works correctly, and stable editing on mobile in Microsoft Teams.

If you want to follow development continuously you can subscribe to the changelogs RSS feed (Swedish only).

Keep track of new content

In addition to what regularly appears as articles and newsletters, we publish new content in these three channels:

  • ISO Implementation Guides: step‑by‑step guides for ISO requirements
  • Knowledge Base: short answers to specific questions about the system, guides, help texts, etc.
  • Changelogs: weekly updates on what has been improved in the IT system since last week

All three have RSS feeds (Swedish only):

Add them to your RSS reader so you don't miss anything.

What's next?

We will continue adding implementation guides for more ISO requirements and AmpliFlow modules. Next on the list are guides for legislation management, crisis management and supplier evaluations.

If you have requests for specific guides or knowledge base articles, contact support. We write content based on what you actually need help with.

Gratis e-bok
Allt från vad standarder kräver till hur du genomför ett projekt för att etablera ett certifierbart ledningssystem.
Tack! Nu får du snart ett e-post från oss!
Oj! 

Något gick fel.

Hör av dig till support@ampliflow.com.
Free e-book
Everything from what standards require to how you implement a project to establishing a certifiable management system.
Tack! Nu får du snart ett e-post från oss!
Oj! 

Något gick fel.

Hör av dig till support@ampliflow.com.
Do you need help getting ready for ISO certification?
AmpliFlow can help you with everything you need to achieve certification. From smart IT systems to project management, training, internal auditing and much more. Book an appointment today to find out more!
Thank you! We will hear from you soon!
Oops!

Something went wrong.

Get in touch with support@ampliflow.com.
Articles

More articles

Tools, information and other resources you need.
Deviation management

Deviation Management - A Step Towards Success

A deep dive into anomaly management and why it's not primarily about finding and fixing errors - then you miss out on the big gains.
Patrik Björklund
November 8, 2023
ISO 42001

What is ISO/IEC 42001 — Artificial Intelligence Management System?

Discover ISO/IEC 42001 (management systems for Artificial Intelligence) and its importance for responsible AI use and risk management.
Patrik Björklund
September 11, 2024
ISO certification

10 reasons why you should ISO certify in a recession

ISO certification gives the company a competitive advantage that becomes even more relevant in a recession. Here we go through 10 reasons why.
Patrik Björklund
January 9, 2023

Do like other happy customers - get AmpliFlow

Schedule a meeting today to discuss how we can help you with systems and/or support.
Small or publicly traded. Recruitment or concrete manufacturing. AmpliFlow is for everyone.