pentagramadvisory, Author at Pentagram Advisory

Insider Threat Mitigation Advice for Critical Infrastructure Entities

Prologue In February 2025, the United States National Counterintelligence and Security Center (or NCSC) released a report titled Insider Threat Mitigation for U.S. Critical Infrastructure Entities – Guidelines from an Intelligence Perspective. Pentagram Advisory is flagging this report with our followers because its insights are equally valid for Australia’s critical infrastructure owners and operators, as defined by Australia’s Security […]

Insider Threat Mitigation Advice for Critical Infrastructure Entities Read More »

Article

Insider Threat: An approach to identifying psychosocial hazards to mitigate insider threat

Article / pentagramadvisory

When does a trusted employee become a risk? Insider threats do not emerge overnight—they are often the result of a gradual shift driven by workplace and personal factors. While organisations focus on technical defences, they can overlook the human element: the psychosocial hazards that can turn loyal employees into potential insider threats. To explore this

Insider Threat: An approach to identifying psychosocial hazards to mitigate insider threat Read More »

Article

In the National Interest – Two Recent Insider Threat Events in Australia

Article / pentagramadvisory

In the workplace setting an employer provides money and / or other benefits to a person in exchange for their labour, knowledge, and time. The relationship is formally set out in a contract which details obligations that fall upon both the employer and employee, contractor, or volunteer – a principle known as quid pro quo. Examples of obligations

In the National Interest – Two Recent Insider Threat Events in Australia Read More »

Article

Who can you trust? Securing critical infrastructure: Critical Worker Identification and Management Framework

Article / pentagramadvisory

Employees in organisations hold varying levels of responsibility and trust, with some having direct access to critical assets, systems, protected information, decision-making process, and key operational functions. Being a critical worker is both a privilege and a responsibility – those entrusted with access to critical assets play an important role in maintaining the security and continuity of essential services. However,

Who can you trust? Securing critical infrastructure: Critical Worker Identification and Management Framework Read More »

Article

The missing home for an Insider Threat Program: Why organisations need a dedicated function

Article / pentagramadvisory

“The problem with collective responsibility is that it leads to collective irresponsibility.” Michael Novak, an American philosopher, journalist, and diplomat In today’s complex geostrategic threat environment, insider threats pose one of the most significant challenges to security of the Australian critical infrastructure companies. Whether malicious or unintentional, threats originating from within an organisation can have devastating

The missing home for an Insider Threat Program: Why organisations need a dedicated function Read More »

Article

In the National Interest – Insider Threat: understanding the people in your workforce and supply chain in the face of increasing extremism in Australia

Article / pentagramadvisory

Prologue In an article Pentagram Advisory published in January 2025, titled The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnership we considered the incoming Trump administration’s concern with insider threat within the United States Government, the military, and defence sector. By extension, in the article, we explored what such concerns within Trump’s administration might herald for Australia

In the National Interest – Insider Threat: understanding the people in your workforce and supply chain in the face of increasing extremism in Australia Read More »

Article

Pentagram Workshop Recap: Quantum Computing – Security Risk to Critical Infrastructure (SOCI) Sectors

Article / pentagramadvisory

On 4 February, Pentagram team held its first workshop for 2025 as part of our ongoing commitment to nurturing a SOCI community of practice. The workshop was on a topic new for Pentagram: Quantum Computing – Security Risk to Critical Infrastructure Sectors. With growing discussions on quantum science and the potential threat posed by quantum computing to secure communications,

Pentagram Workshop Recap: Quantum Computing – Security Risk to Critical Infrastructure (SOCI) Sectors Read More »

Article

Pentagram Advisory: partnering with the Australian Health Cyber Sharing Network to deliver insider threat advice and education to strengthen cyber security

Article / pentagramadvisory

We invite you to either listen to the article or read the below. Pentagram Advisory Pty Ltd (Pentagram) is proud to be a foundation partner supporting CI-ISAC Australia (CI-ISAC) in its delivery of cyber security services for Australia’s health sector under a Commonwealth Government grant announced on 29 January 2025. The $6.4 million grant funds the creation and

Pentagram Advisory: partnering with the Australian Health Cyber Sharing Network to deliver insider threat advice and education to strengthen cyber security Read More »

Article

Quantum Leap, Traditional Shields: How the SOCI Act can build resilience for Australian critical infrastructure

Article / pentagramadvisory

We invite you to either listen to the article or read the below. As the world races toward usable quantum technology, the transformative potential of quantum technology has emerged as a game-changer comparable in significance to the invention of the atomic bomb or the rise of artificial intelligence. While quantum technology advancements promise significant benefits,

Quantum Leap, Traditional Shields: How the SOCI Act can build resilience for Australian critical infrastructure Read More »

Article

The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnerships

Article / pentagramadvisory

We invite you to either listen to the article or read the below. Insider threat is not new, but it has been turbocharged in the 21st century by advances in technology. Be it communications, computing, social media, or access to information the fact is 21st century technology (a very recent and innovative in terms of the arc of

The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnerships Read More »

Article