TL;DR. New national guidance now expects critical infrastructure operators to be able to run essential services for three months while completely cut off, from corporate networks,…
Read the article →TL;DR. Many energy operators started the Essential Eight, stalled at Maturity Level One, and are now looking at a hard new obligation: AESCSF Security Profile 2…
Read the article →Somewhere in the noise of the last few weeks, the obligation sitting over Australia’s critical infrastructure quietly changed shape, and not many people seem to have…
Read the article →For the first time since the regime was built in 2006, Australia’s anti-money-laundering and counter-terrorism-financing obligations now reach the professions. The Anti-Money Laundering and Counter-Terrorism Financing…
Read the article →For years, third-party risk has occupied an awkward spot on the register. It is one of the most common ways an organisation actually gets breached, and…
Read the article →If this is the kind of thinking you want on your side of the table, let's talk about your risk operation.
Get in touch