Articles and opinion pieces

Who can you trust? Securing critical infrastructure: Critical Worker Identification and Management Framework

Employees in organisations hold varying levels of responsibility and trust, with some having direct access to critical assets, systems, protected information, decision-making process, and key operational functions. Being a critical worker is both a privilege and a responsibility – those entrusted with access to critical assets play an important role in maintaining the security and continuity of essential services. However,

Who can you trust? Securing critical infrastructure: Critical Worker Identification and Management Framework Read More »

Article

The missing home for an Insider Threat Program: Why organisations need a dedicated function

Article / pentagramadvisory

“The problem with collective responsibility is that it leads to collective irresponsibility.” Michael Novak, an American philosopher, journalist, and diplomat In today’s complex geostrategic threat environment, insider threats pose one of the most significant challenges to security of the Australian critical infrastructure companies. Whether malicious or unintentional, threats originating from within an organisation can have devastating

The missing home for an Insider Threat Program: Why organisations need a dedicated function Read More »

Article

In the National Interest – Insider Threat: understanding the people in your workforce and supply chain in the face of increasing extremism in Australia

Article / pentagramadvisory

Prologue In an article Pentagram Advisory published in January 2025, titled The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnership we considered the incoming Trump administration’s concern with insider threat within the United States Government, the military, and defence sector. By extension, in the article, we explored what such concerns within Trump’s administration might herald for Australia

In the National Interest – Insider Threat: understanding the people in your workforce and supply chain in the face of increasing extremism in Australia Read More »

Article

Pentagram Workshop Recap: Quantum Computing – Security Risk to Critical Infrastructure (SOCI) Sectors

Article / pentagramadvisory

On 4 February, Pentagram team held its first workshop for 2025 as part of our ongoing commitment to nurturing a SOCI community of practice. The workshop was on a topic new for Pentagram: Quantum Computing – Security Risk to Critical Infrastructure Sectors. With growing discussions on quantum science and the potential threat posed by quantum computing to secure communications,

Pentagram Workshop Recap: Quantum Computing – Security Risk to Critical Infrastructure (SOCI) Sectors Read More »

Article

Pentagram Advisory: partnering with the Australian Health Cyber Sharing Network to deliver insider threat advice and education to strengthen cyber security

Article / pentagramadvisory

We invite you to either listen to the article or read the below. Pentagram Advisory Pty Ltd (Pentagram) is proud to be a foundation partner supporting CI-ISAC Australia (CI-ISAC) in its delivery of cyber security services for Australia’s health sector under a Commonwealth Government grant announced on 29 January 2025. The $6.4 million grant funds the creation and

Pentagram Advisory: partnering with the Australian Health Cyber Sharing Network to deliver insider threat advice and education to strengthen cyber security Read More »

Article

Quantum Leap, Traditional Shields: How the SOCI Act can build resilience for Australian critical infrastructure

Article / pentagramadvisory

We invite you to either listen to the article or read the below. As the world races toward usable quantum technology, the transformative potential of quantum technology has emerged as a game-changer comparable in significance to the invention of the atomic bomb or the rise of artificial intelligence. While quantum technology advancements promise significant benefits,

Quantum Leap, Traditional Shields: How the SOCI Act can build resilience for Australian critical infrastructure Read More »

Article

The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnerships

Article / pentagramadvisory

We invite you to either listen to the article or read the below. Insider threat is not new, but it has been turbocharged in the 21st century by advances in technology. Be it communications, computing, social media, or access to information the fact is 21st century technology (a very recent and innovative in terms of the arc of

The Insider Threat and AUKUS: Safeguarding Australia’s Strategic Partnerships Read More »

Article

Quantum threats to critical national infrastructure – be aware but not (necessarily) afraid

Article / pentagramadvisory

Author: Dr Rajiv Shah, MDR Security We invite you to either listen to the article or read the below. In recent months you may have heard increasing discussion of the threats that quantum computing could pose to cyber security. One trigger for this was the finalisation of proposed new encryption standards by the National Institute of

Quantum threats to critical national infrastructure – be aware but not (necessarily) afraid Read More »

Article

Understanding the SOCI Audit Program: Key Insights, Compliance Activities, and CIRMP Annual Report Analysis

Article / pentagramadvisory

We invite you to either listen to the article or read the below. On 28 November 2024, the Cyber and Infrastructure Security Centre (CISC), within the Department of Home Affairs (DHA), shared key updates on upcoming audit activities aimed at ensuring compliance with the Security of Critical Infrastructure Act 2018 (SOCI Act). The compliance landscape for the security of critical infrastructure in Australia has evolved significantly

Understanding the SOCI Audit Program: Key Insights, Compliance Activities, and CIRMP Annual Report Analysis Read More »

Article

Latest amendments to the Security of Critical Infrastructure Act 2018: A major shift impacting critical infrastructure owners and operators

Article / pentagramadvisory

We invite you to either listen to the article or read the below. Data storage systems that hold business critical data On 29 November 2024, the Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Act 2024 (ERP Act) received Royal Assent, introducing changes to the Security of Critical Infrastructure Act 2018 (SOCI Act). In this article, Pentagram Advisory team

Latest amendments to the Security of Critical Infrastructure Act 2018: A major shift impacting critical infrastructure owners and operators Read More »

Article

Thinking