Thinking

Prologue Environmental, Social, and Governance (ESG) is now a decisive force in investment and corporate strategy.  The Global Sustainable Investment Review 2022 reported that ESG investing has captured more than US$30 trillion in assets. Setting aside debates about ideology and contemporary drivers, ESG’s practical purpose is to balance risk and return in external investment choices, while […]

August 2025 marks the second anniversary of the Critical Infrastructure Risk Management Program (CIRMP) requirements under the Security of Critical Infrastructure Act 2018 (SOCI Act).  Over the past two years, Australia’s critical infrastructure sectors have worked hard to embed CIRMPs as structured, proactive approaches to managing four key hazard vectors: cyber and information security, personnel, supply chain, and physical

The global shift to remote work during the COVID-19 pandemic forced organisations and their employees to rapidly adapt their operations, technologies, and workforce practices.  For many people, working from home became not just a temporary solution, but the new normal.  Employees restructured their lives around remote work and, in many cases, businesses saw increased productivity, improved work-life

A person starts a new job – excited, hopeful, and ready to contribute.  We have all been there.  That sense of anticipation, the feeling of having earned a new opportunity, carrying with us a mix of enthusiasm, excitement, and ambition.  Some of us are eager to prove ourselves.  Others are looking for a positive, supportive workplace – somewhere to

What is a security maturity model? A security maturity model is a structured framework that enables organisations to assess and systematically improve their security posture over time.  An organisation’s risk assessment, risk appetite, and available resources will all inform the level of security maturity it aims to achieve.  A maturity model provides a roadmap for organisations to