What ISM compliance really means, how the risk-based approach works, and the practical steps to apply the Australian Government Information Security Manual to your systems.
A practical guide to the PSPF annual self-assessment: how maturity is judged, the evidence that matters, and how to turn PSPF reporting into genuine security improvement.
How to map NIST SP 800-53 to the Australian ISM, where the frameworks align and differ, and how a unified control set cuts compliance effort for global and government work.
A practical guide to writing a System Security Plan (SSP): structure, what assessors look for, common mistakes and how the SSP, SRMP and Statement of Applicability fit together.
Preparing for an IRAP assessment? Ten practical readiness steps — from system boundary and SSP quality to evidence and cloud responsibilities — that save time, cost and findings.
A practical take on zero trust for Australian government and regulated organisations — the core principles, how they align with the ISM, and a realistic roadmap that avoids vendor hype.