Course Overview
This Practitioner-level course introduces participants to the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Telecommunications Edition — a structured, evidence-based approach designed to enable organisations to evaluate and uplift the implementation of their Telecommunications Critical Infrastructure Risk Management Program (CIRMP).
This course is aligned with a telecommunications entity’s statutory obligations under the Security of Critical Infrastructure Act 2018 (SOCI Act) and the Security of Critical Infrastructure (Telecommunications Security and Risk Management Program) Rules 2025 (TSRMP Rules), including the 77 obligations that a responsible entity must meet across governance, cyber and information security, personnel security, supply chain security, physical security and natural hazards.
Participants in this course will learn how to interpret and assess these obligations through a maturity lens using the Model’s four maturity levels and eight assessment categories, tailored to telecommunications sector risks, interdependencies and operational realities.
The course also provides access to a customisable Telecommunications CIRMP Maturity Assessment and Evaluation Templates, aligned with all 77 SOCI Act and TSRMP Rules obligations, supporting structured self-assessment, evidence capture, gap analysis and uplift planning. These templates can support ongoing Telecommunications CIRMP maturity assessments and enable organisations to maintain a defensible record of the evolution of their CIRMP and the associated uplift in the security of their critical assets.
The Model also supports internal assurance and governance by providing Boards and executives with an evidence-based view of CIRMP implementation maturity, while supporting regulator engagement and demonstrating the organisation’s approach to ongoing security uplift.
Learning Objectives
By the end of this course, participants will be able to:
1. Understand the role of maturity in Telecommunications CIRMP implementation: Explain how structured maturity assessment strengthens regulatory defensibility, governance assurance and uplift planning for telecommunications critical infrastructure assets.
2. Explore the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Telecommunications Edition: Understand the structure of the Model — including its four maturity levels and eight assessment categories — aligned with SOCI Act and TSRMP Rules obligations and focused on telecommunications-specific hazards such as remote access, network-to-network interfaces, offshore data handling and reliance on major suppliers.
3. Interpret Telecommunications CIRMP requirements through a maturity lens: Map the 77 SOCI Act and TSRMP Rules obligations to maturity indicators and understand how obligations cluster across cyber and information security, personnel security, supply chain security, physical security and natural hazards requirements.
4. Use the editable Telecommunications CIRMP Maturity Assessment and Evaluation Template: Use the template to assess organisational capability across all-hazard domains, document evidence, record ratings and evaluate implementation maturity.
5. Prepare actionable outputs for Boards and regulators: Translate maturity results into dashboards, heatmaps and concise written summaries for executive briefings, governance oversight, regulator engagement and attestation readiness. Use these outputs to support evidence-based decision making.
Learning Outcomes
After completing this course, participants will be able to:
1. Describe the principles of Telecommunications CIRMP maturity: Explain how maturity assessment can support compliance assurance, strengthen risk governance and inform strategic investment decisions.
2. Apply the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Telecommunications Edition: Conduct a robust assessment across cyber and information security, personnel security, supply chain security, physical security and natural hazards, governance and risk management, consistent with telecommunications sector obligations.
3. Document evidence and assess gaps: Use the editable template to record evidence, assess maturity against all 77 obligations and identify priority areas for uplift. Use the template as a live assessment tool to maintain a defensible record of the evolution of the Telecommunications CIRMP and associated security governance and capability over time.
4. Produce governance-ready outputs: Develop heatmaps, dashboards and Board-ready summaries that present maturity levels, identified gaps, priority areas and implementation status, supporting governance oversight, internal assurance, regulator engagement and annual attestation processes where applicable.
5. Prioritise and plan improvement activities: Use assessment results to develop forward improvement plans aligned with risk appetite, business priorities and regulatory expectations, including applicable SOCI Act and TSRMP Rules compliance timelines.
Private Coaching Session: Includes a one-hour private coaching session with the Pentagram Advisory team. During this session, we will provide tailored, practical advice specific to your organisation’s needs. Whether you are preparing for your next Telecommunications CIRMP maturity assessment, refining your internal assessment or assurance approach, or seeking guidance on interpreting and presenting maturity results to Boards, executives or regulators, this session is designed to help you apply the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Telecommunications Edition with confidence.