pentagramadvisory

On 10 June 2026, the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (Enhanced CIRMP Rules 2026) commenced, introducing the most significant expansion of Australia’s Critical Infrastructure Risk Management Program (CIRMP) framework since the Security of Critical Infrastructure (Critical Infrastructure Risk Management Program) Rules 2023 (CIRMP Rules 2023) came into effect. The Enhanced Rules introduce 78 additional legislative

Trust, bias and the challenge of managing human risk in critical infrastructure. Introduction Most Boards and executive teams are now accustomed to discussing cyber security, supply chain disruption, regulatory compliance and operational resilience. These risks are longstanding and hence familiar. They appear on risk registers, in audit reports, in regulatory briefings and in executive dashboards.

If you are fascinated by Harry Potter, psychology, human behaviour, and the complex realities of protective security — this article is for you. Because beneath the magic, mythical creatures, and fantastical battles lies something surprisingly real: a sophisticated study of trust, manipulation, coercion, vulnerability, loyalty, radicalisation, and human risk. Long before organisations spoke so publicly

Recently, many critical infrastructure responsible entities covered by the Security of Critical Infrastructure Act 2018 (SOCI Act) are likely to have noticed a significant evolution in the annual Critical Infrastructure Risk Management Program (CIRMP) reporting process, with the FY2025–26 reporting cycle signalling a broader shift in regulatory expectations surrounding governance, resilience, and Board accountability. The revised annual reporting