A person starts a new job – excited, hopeful, and ready to contribute. We have all been there. That sense of anticipation, the feeling of having earned a new opportunity, carrying with us a mix of enthusiasm, excitement, and ambition. Some of us are eager to prove ourselves. Others are looking for a positive, supportive workplace – somewhere to […]
Trusted Workforce: The role of psychological contract Read More »
What is a security maturity model? A security maturity model is a structured framework that enables organisations to assess and systematically improve their security posture over time. An organisation’s risk assessment, risk appetite, and available resources will all inform the level of security maturity it aims to achieve. A maturity model provides a roadmap for organisations to
A Message from Tim and Marina Pentagram Advisory celebrated its first year of operation in June 2025. As we reflect on this milestone, we are taking a moment to pause, not just to acknowledge the achievements, but to share what has truly stood out: the power of collaboration. In looking back on Pentagram’s achievements, we
Pentagram Advisory First Anniversary – Celebrating One Year of Collaboration Read More »
Prologue Australian media reported in May 2025 that the leader of Australia’s Transport Workers Union (TWU) is prepared to “shut down Australian transport” in pursuit of union claims. TWU leader Michael Kaine said that the TWU must seize on Labor’s 2025 election victory to undertake the “largest co-ordinated industrial campaign” in the transport sector’s history. Kaine listed companies that
In the National Interest: Transport Workers Union Militancy and Insider Threat Read More »
The Australian Government has operated insider threat programs since Australia’s federation in 1901, though the programs may not have been named ‘insider threat’. The private sector around the world including banks, miners of precious metals and stones, and lawyers have over centuries also operated insider threat programs to protect their assets and operations. Since 2001, triggered
On 27 March 2025, the Transport Security Amendment (Security of Australia’s Transport Sector) Act 2025 (TSA Act) received Royal Assent. This landmark legislation substantially reforms the Aviation Transport Security Act 2004 (ATSA) and the Maritime Transport and Offshore Facilities Security Act 2003 (MTOFSA), modernising Australia’s transport security framework to address a rapidly evolving threat landscape. One of the most significant amendments under
A May 2025 insider threat at Canberra Hospital highlights key CIRMP compliance lessons under Australia’s SOCI Act, emphasizing personnel security and insider risk detection.
As the regulatory environment for Australian critical infrastructure grows more stringent, boards and directors of ‘responsible entities’ covered by the Security of Critical Infrastructure Act 2018 (SOCI Act) must pay close attention to their oversight obligations in relation to security risks. As responsible entities are preparing to submit their annual report to the regulator Department of Home Affairs
Prologue Critical infrastructure is a fundamental enabler of Australia’s national security. Australian governments over decades have recognised the need to protect critical infrastructure from evolving threats as a component of national security yet have offered policy guidance with little effective action. Government has put the onus for action onto the private sector to protect nationally critical
In the National Interest: Critical Infrastructure as a National Security Priority Read More »
In today’s increasingly digital operating environments, organisations rely more than ever on technological solutions and artificial intelligence (AI) to monitor insider threats. Sophisticated systems now track access to data, analyse sentiment, and detect behavioural anomalies. While AI can analyse data patterns and flag deviations from the norm, it lacks the nuanced, contextual understanding that humans bring. Often,
