The Enhanced CIRMP Readiness Assessment Module — A Practical Guide

This course introduces participants to Pentagram Advisory’s Enhanced CIRMP Readiness Assessment Module (the Module) — a structured, evidence-based implementation methodology designed to assist responsible entities in preparing for the additional obligations introduced by the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (Enhanced CIRMP Rules 2026).

The Module applies Pentagram Advisory’s structured readiness methodology across 78 Enhanced CIRMP obligations using four readiness levels.

Rather than treating implementation as a checklist exercise, it enables organisations to establish their current CIRMP implementation baseline, identify implementation gaps, determine what can be retained, validated, strengthened, expanded or newly implemented, prioritise implementation activities based on security risk, legislative implementation timeframes and organisational priorities, and translate assessment findings into a practical CIRMP Implementation Roadmap.

The Module complements Pentagram Advisory’s CIRMP Security Maturity Assessment and Evaluation Model™. The CIRMP Security Maturity Model evaluates how effectively an organisation’s existing CIRMP has been implemented and is operating, while the Enhanced CIRMP Readiness Assessment Module evaluates the organisation’s preparedness to implement the additional Enhanced CIRMP obligations.

The Module can also be applied independently using an organisation’s existing CIRMP as the implementation baseline. Organisations that are already applying Pentagram Advisory’s CIRMP Security Maturity Assessment and Evaluation Model™ to evaluate the security maturity of their CIRMP may use those findings as a structured current-state implementation baseline, providing an even stronger foundation for the readiness assessment.

Throughout the course, participants will learn how to interpret the Enhanced CIRMP obligations, identify the organisation’s current implementation baseline, assess readiness using Pentagram’s four readiness levels, document supporting evidence, and convert assessment findings into a structured implementation program using the accompanying Word template, Excel workbook, Practical Application and User Guide, and Workbook Administration and Maintenance Guide.

Participants receive Pentagram Advisory’s proprietary Enhanced CIRMP Readiness Assessment Module, including:

• Enhanced CIRMP Readiness Assessment Word Template
• Enhanced CIRMP Readiness Assessment Excel Workbook
• Practical Application and User Guide
• Workbook Administration and Maintenance Guide.

By the end of this course, participants will be able to:

1. Understand the Enhanced CIRMP Rules: Explain the purpose, structure and key implementation features of the Enhanced CIRMP Rules and understand how the additional obligations extend an organisation’s existing CIRMP.

2. Understand the relationship between CIRMP maturity and Enhanced CIRMP readiness: Explain how Pentagram’s CIRMP Security Maturity Assessment and Evaluation Model™ can provide a structured current-state implementation baseline for the Enhanced CIRMP Readiness Assessment Module, and understand how the two methodologies complement one another throughout the implementation lifecycle.

3. Apply the Enhanced CIRMP Readiness Assessment Module: Apply Pentagram’s proprietary readiness methodology to establish the organisation’s current implementation baseline, assess readiness against the 78 Enhanced CIRMP obligations using the four readiness levels, document supporting evidence and produce a consistent, objective and defensible readiness assessment.

4. Develop a CIRMP Implementation Roadmap: Translate readiness assessment findings into a structured CIRMP Implementation Roadmap by prioritising implementation activities based on security risk, legislative implementation timeframes, organisational priorities and dependencies, and identifying appropriate responsibilities, target timeframes and governance actions.

After completing this course, participants will be able to:

1. Interpret the Enhanced CIRMP obligations: Identify the additional implementation expectations introduced by the Enhanced CIRMP Rules and understand how they build upon an organisation’s existing CIRMP.

2. Conduct a structured, evidence-based readiness assessment: Establish the current implementation baseline, gather and evaluate supporting evidence, apply Pentagram’s four readiness levels objectively and document the rationale supporting each readiness decision.

3. Prioritise implementation activities: Determine what should be retained, validated, strengthened, expanded or newly implemented, and develop a structured, risk-based implementation program.

4. Support Board and executive oversight: Produce readiness assessments and the CIRMP Implementation Roadmap that support governance, executive decision-making, implementation monitoring and reporting.

5. Transition from readiness to ongoing maturity: Understand how implementation of the Enhanced CIRMP obligations becomes part of the organisation’s ongoing CIRMP maturity, assurance and continuous improvement activities.

Private Coaching Session: Includes a one-hour private coaching session with the Pentagram Advisory team. During this session, we will provide practical guidance tailored to your organisation’s implementation program and operational context. Whether you are preparing for your Enhanced CIRMP readiness assessment, validating your implementation approach, interpreting specific legislative obligations, or developing your CIRMP Implementation Roadmap, this session is designed to help you apply Pentagram Advisory’s Enhanced CIRMP Readiness Assessment Module consistently, objectively and confidently within your organisation.