Industry Insider

  • New Zealand Proposes Mandatory Cyber Security Regime

    The New Zealand Government has released a discussion document proposing mandatory cyber security obligations for operators of critical infrastructure, including enforceable minimum standards, incident reporting requirements, and director-level accountability.

  • Why Data, Information, and AI Governance Can't Stay in Their Lanes

    If you've spent any time in governance, you've noticed something: we've been running three separate disciplines that are all trying to solve variations of the same problem. Data governance over here. Information governance over there. And now AI governance is showing up like a new kid at school, expecting everyone to make room.

  • Rethinking the Essential Eight: Cybersecurity in the Age of AI

    As someone working at the intersection of cybersecurity and public sector technology, I’ve long respected the Essential Eight framework developed by the Australian Cyber Security Centre (ACSC). It’s practical, actionable, and has helped lift the security posture across government agencies and critical infrastructure. But the world has changed. And so must our approach.

  • Ransom Payments Surge as Ransomware Groups Multiply

    Ransom payments climbed sharply in 2025, with 24% of ransomware victims paying - up from 14% the previous year - as the number of active threat groups rose 16% to 67, according to a new global report. The S-RM and FGS Global Cyber Incident Insights Report 2026, drawing on data from more than 800 incidents responded to globally in 2025, found the average ransom payment reached USD $296,000. Ransomware accounted for 45% of all incidents.

  • What my mango tree taught me about AI

    It’s hard to attend a meeting today without AI taking centre stage. Everybody is talking about what’s next for AI, what benefits it will provide, which tools it is going to be available within, and how it is going to make your life easier, or even worse, take your job!!

  • When Data Moves but Meaning Disappears - how AS5393 Can Help

    When a hospital migrated patient records to a new clinical management platform, the technical transfer succeeded. Every patient had a record in the new system. But six months later, clinicians discovered that specialist treatment notes were no longer linked to the diagnostic imaging that informed them.

  • youX Data Breach Exposes 444,000 Australians' Records

    A major cybersecurity incident at Sydney-based asset finance technology company youX has exposed the personal and financial records of 444,538 Australian borrowers, with a threat actor claiming to have exfiltrated 141 gigabytes of data from an unsecured cloud database.

  • New Zealand Proposes Mandatory Cyber Security Regime

    The New Zealand Government has released a discussion document proposing mandatory cyber security obligations for operators of critical infrastructure, including enforceable minimum standards, incident reporting requirements, and director-level accountability.

  • Why Data, Information, and AI Governance Can't Stay in Their Lanes

    If you've spent any time in governance, you've noticed something: we've been running three separate disciplines that are all trying to solve variations of the same problem. Data governance over here. Information governance over there. And now AI governance is showing up like a new kid at school, expecting everyone to make room.

  • Rethinking the Essential Eight: Cybersecurity in the Age of AI

    As someone working at the intersection of cybersecurity and public sector technology, I’ve long respected the Essential Eight framework developed by the Australian Cyber Security Centre (ACSC). It’s practical, actionable, and has helped lift the security posture across government agencies and critical infrastructure. But the world has changed. And so must our approach.

  • Ransom Payments Surge as Ransomware Groups Multiply

    Ransom payments climbed sharply in 2025, with 24% of ransomware victims paying - up from 14% the previous year - as the number of active threat groups rose 16% to 67, according to a new global report. The S-RM and FGS Global Cyber Incident Insights Report 2026, drawing on data from more than 800 incidents responded to globally in 2025, found the average ransom payment reached USD $296,000. Ransomware accounted for 45% of all incidents.

  • What my mango tree taught me about AI

    It’s hard to attend a meeting today without AI taking centre stage. Everybody is talking about what’s next for AI, what benefits it will provide, which tools it is going to be available within, and how it is going to make your life easier, or even worse, take your job!!

  • When Data Moves but Meaning Disappears - how AS5393 Can Help

    When a hospital migrated patient records to a new clinical management platform, the technical transfer succeeded. Every patient had a record in the new system. But six months later, clinicians discovered that specialist treatment notes were no longer linked to the diagnostic imaging that informed them.

  • youX Data Breach Exposes 444,000 Australians' Records

    A major cybersecurity incident at Sydney-based asset finance technology company youX has exposed the personal and financial records of 444,538 Australian borrowers, with a threat actor claiming to have exfiltrated 141 gigabytes of data from an unsecured cloud database.