Thinking

Who makes the suitability decision, who owns the risk, and how ongoing assurance should work in practice On 10 June 2026, the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (the Enhanced CIRMP Rules 2026) commenced, introducing a significant uplift in the security requirements applying to affected responsible entities. The Enhanced CIRMP Rules 2026 amend the Security of

What Boards and senior executives should prioritise ahead of the 10 June 2027 and 10 June 2028 implementation milestones On 10 June 2026, the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (the Enhanced CIRMP Rules 2026) commenced, introducing a significant uplift in the security requirements applying to affected responsible entities. The Enhanced CIRMP Rules 2026 amend the Security of Critical Infrastructure

Think about the security risks that come most readily to mind. A major cyberattack in the news. A security incident your organisation spent months recovering from. A dramatic foreign interference case study presented at a conference. Now consider a harder question: Are these the most material security risks facing your enterprise or simply the risks that

The Australian Workforce Paradox Australia’s workforce presents an interesting paradox. According to Gallup’s State of the Global Workplace 2026, only 21% of Australian employees are ‘engaged’ with their work, while 65% are not engaged and 14% are actively disengaged. At the same time, 50% report experiencing stress during much of the previous day, ten percentage points above

On 10 June 2026, the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (Enhanced CIRMP Rules 2026) commenced, introducing a significant uplift in the way affected responsible entities must understand and manage supply chain risk. The Enhanced CIRMP Rules 2026 amend the Security of Critical Infrastructure (Critical Infrastructure Risk Management Program) Rules 2023 (CIRMP Rules 2023) made under the Security of Critical

Many responsible entities have now completed their initial review of the Security of Critical Infrastructure Legislation Amendment (Enhanced Critical Infrastructure Risk Management Program) Rules 2026 (Enhanced CIRMP Rules 2026) and are beginning to consider what the additional legislative obligations mean for their organisations. Understanding the new requirements is an important first step. For Boards and senior executives, however, the