Daniel Sekers FAICD

The DTA has released the latest version of the "Technical standard for government’s use of artificial intelligence". This is a key bookmark for any consulting firm advising Aus government agencies on the adoption and use of AI. If you create RFPs, I highly recommend you add adherence to this framework as an NFR. It looks like a fair bit of content has been added since the last version and it now covers the full spectrum of preparation, implementation and most importantly, governance. #AI #Governance #AIFramework #FrontierFirm #AusGov #goverment

16

2 Comments

Cyber risk in 2026 is shifting fast — and a recent CRN Australia piece highlights two themes that keep coming up in real conversations: identity theft and AI-driven shadow IT. Identity theft is now the frontline. Stolen credentials, session hijacking, and token abuse make intrusions harder to detect — which is why stronger identity controls and phishing-resistant MFA (such as passkeys) are quickly becoming non-negotiable. AI-driven shadow IT is the sleeper risk. AI tools and agents are being adopted rapidly, often without clear oversight. That creates new “non-human identity” access paths, permission sprawl, and data exposure risks, especially when AI assistants start living inside the browser and business workflows. So here’s the governance question that matters: ❓Who owns that risk? Is it clearly owned, tested, and evidenced or assumed to sit somewhere with IT or the MSP? If you’d like a practical starting point, DM me to arrange a short discovery call and we’ll map risk ownership and the minimum evidence set you should expect. https://lnkd.in/gWBqs8N2 #CyberGovernance #IdentitySecurity #AIRisk #ShadowIT #BoardAssurance #SMB1001 #RiskManagement CRN Australia

2

1 Comment

The latest unemployment figures are in - and they are not great. Australia’s jobless rate has climbed to 4.5%, the highest since late 2021. That translates to roughly 33,900 more people out of work in a single month, while total job creation for the year sits at just 116,000 - far below the 320,000 we saw over the same period last year. And here’s the kicker: ICT contractors and consultants are not even fully captured in those figures. When project delays, budget freezes, and paused procurement cycles are factored in, the real picture for technology professionals could be significantly worse. At Axiom Data, we have always said our focus is not just on placements - it’s on people. Our philosophy has never been about building a recruitment company; it’s about building a community of professionals who share a standard of excellence and a sense of purpose in their work. We understand that the market is cooling. But in times like these, what matters most is staying connected - keeping your skills sharp, your confidence strong, and your network active. Each conversation we have with a candidate is not transactional - it is meaningful. If you’re navigating uncertainty, reach out. We are here for you - whether it is to discuss opportunities today or to plan for what’s next. #AxiomData #PeopleFirst #Data #CyberSecurity #ICT #Defence #Analytics #CareerSupport #Leadership #Community

3

2 Comments

Fresh off-the-press recommendations on cyber security for boards from the Australian Signals Directorate and the Australian Institute of Company Directors, including: 1) Ensuring the technology your organisation uses or provides is secure by design and secure by default 2) Prioritising the protection of your organisation’s most critical assets — the ‘crown jewels’ 3)Replacing legacy IT systems that pose ongoing security and operational risks 4) Effectively managing third-party and supply chain cyber risks 5) Starting the transition to post-quantum cryptography to prepare for future threats #cyber #cybersecurity

12

🤖 New Cyber Guidance Just Dropped 🤖 One of the advantages of being an ASD Network Partner, is we get to see real-time cyber threat intelligence and strategic guidance directly from the Australian Signals Directorate (ASD). Some things we cannot share, but this guidance we can. The just released guidance from ACSC/CISA — “Principles for the secure integration of Artificial Intelligence in Operational Technology (OT)” offers a timely and practical framework for organisations pursuing AI-enabled OT transformation. 👉 See the comments section for the link. Key Takeaways 1️⃣ Not all OT use-cases are suitable for AI - especially safety-critical or real-time control functions. For example, cyber dependent-physical access control (AI deciding when to unlock doors, gates, or safety barriers). Why? AI cannot be the single gatekeeper for safety-critical decisions. 2️⃣ AI obviously adds new risk layers - model drift, poor data quality, opaque decisions, vulnerabilities in third-party models. 3️⃣ Secure-by-design is essential - governance, assurance, testing and clear accountability across the lifecycle. 4️⃣ Human oversight still matters - operators must understand how AI makes decisions and when to intervene. 5️⃣ Continuous monitoring is non-negotiable - Just like any other framework or process, AI systems degrade over time if not actively managed. For cybersecurity leaders, board members, and operational-technology (OT) engineers, this should trigger an immediate re-evaluation of AI pilots. AI in OT is a major opportunity - but only for organisations that integrate it safely, securely and with the right governance foundation. If you’re reviewing your AI risk posture or planning to introduce AI into operational environments, we can perform an AI governance gap review in most cases in under four weeks. #AIGovernance #OperationalTechnology #CyberSecurity #CriticalInfrastructure #AIinIndustry

17

1 Comment

We’ve added a bunch of future-focused capabilities — like AI, advanced manufacturing, cyber, autonomous systems, and space tech — making it easier for defence teams to find the right suppliers, and for Aussie businesses to get in on cutting-edge work. Built on industry feedback and growing fast. Check out the full list on our blog — and if you're not on AusDIP yet, now’s the time. Link in comments. #AusDIP #DefenceIndustry #FutureTech

9

1 Comment

In today's fast-paced digital landscape, effective leadership development tailored for CTOs and CIOs in Australia is essential for driving innovation and aligning technology initiatives with business goals. As technology continues to evolve at an unprecedented rate, the responsibilities of these roles have expanded, demanding not only technical acumen but also exceptional leadership skills. How can […] Read on: https://lnkd.in/gbaMaBWF Leadership Development Tailored for CTOs and CIOs.

3

This is an event that should be attended, time zones permitting. Australia has always adopted a robust national, whole-of-society approach to dealing with cybersecurity. The approach to developing cybersecurity is developing rapidly, to deliver the country's 2023-2030 cyber strategy. The webinar discusses how Australia will move from Horizon 1 to Horizon 2 and its next book of work. https://lnkd.in/eez8X6dA Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement

1

1 Comment

Federal and DOW mission partners are looking for cutting-edge commercial solutions and FedRAMP is the gateway for enabling access to SaaS services. Join us as we celebrate success with our partners as well as the stackArmor team Vasion emagineIT Andesite Carahsoft Adam Chun Justin Scott Johann D. Dave Brown Gabriela Smith Ryan Balogh Drew Myklegard Patti Chanthaphone

16

The March update to the Australian Signals Directorate 's Information Security Manual is here. A new cyber security principle on ‘executive artificial intelligence accountability’ was added recommending that the board of directors or executive committee is accountable for ensuring that artificial intelligence is secure, controllable, human-supervised and used in an ethical and accountable manner. [GOV-08] Download from here: https://lnkd.in/g5Ye4tJz

22

2 Comments

✨ Mastery in Alignment at the ASIAL Security Conference held at the International Convention Centre Sydney (ICC Sydney) Panel: “The Rise of AI” What an honour to witness such depth of wisdom and alignment across the panel discussion at the Australian Security Industry Association Limited (ASIAL) . Each speaker brought not only expertise but a conscious lens on the evolving role of AI in shaping our future. 🔹 Anna Acopian reminded us that people remain the true strength behind every business. She went further, challenging us to consider the environmental impact of the solutions we create. Her thought process stretches well beyond short-term vision an approach we need more of as we navigate this next transformation. 🔹 Lee Hickin followed with unparalleled mastery in cloud architecture and design principles. His reflections on the role of AI and the consciousness we embed in its delivery left the room leaning in. What if it’s not just about what AI does but how we shape its intent? 🔹 Stephen Kowal brought industry wisdom with clarity, emphasising IT solutions that clear paths for customers to do more, and go further. His reminder that while the skills of tomorrow will evolve, creativity, resilience, and EQ will remain timeless resonated deeply. 🔹 Tanya Kunze closed with profound insights on human-AI collaboration. She showed us that individuality within teams is not a challenge but a gift one that creates a melting pot of knowledge beyond any system and gives rise to expansive, collective thought. Together, their voices were not just informative but transformative. They spoke to the heart of what leadership in AI demands: foresight, responsibility, and alignment beyond technology alone. As we continue this journey, may we hold close the reminder that it is people, values, and conscious intent that will shape how AI truly serves us all. It was a joy to witness today and the unity in thought. Captured in the video snippets of each of the speakers from today. A huge note of gratitude to the team at Australian Security Industry Association Limited (ASIAL) for an extrodinary conference, Soren Norgaard, Katie Ashford, and Brenda Jackson. A note of gratitude to Rinske Geerlings (MBCI COBIT ISO22301 ISO31000) as Emcee whose mastery ensured for a smooth transition throughout the conference. #AISASecurityConference #AI #Leadership #solutions2you

20

4 Comments

ITIL v5 in the Australian enterprise context Local factors matter: Regulatory scrutiny on AI and cyber Tight tech labour market Mature Agile and product practices in many sectors ITIL v5 can help tie these threads together—if you implement it thoughtfully. Australian‑flavoured view: https://lnkd.in/gpfQA-3G #Australia #ITIL5 #ITSM #CyberSecurity #DigitalGov #AdvancedTraining

The Australian Signals Directorate has reported that "the cyber threat posed to Australian governments, critical infrastructure, businesses and households. These circumstances underline the significant role that cyber capabilities play in safeguarding our national security and the critical role ASD continues to play in protecting Australians". The Albanese Government has committed $15–$20 billion to 2033–34 to enhance our cyber domain capabilities as part of the 2024 Integrated Investment Program. This is critical for Australia's National interests. Small businesses are at the full front of these threats. Dreamtilt has provided Gastel Peterson & Co. with two good tips as far as cloud services and telecommunications: 1. Have a clear understanding of who/where/ and how the business data is being managed. This can be achieved through a formal contract with the selected internet provider. Many of us only look into it, when there is something wrong in the service provision. 2. Have a clear understanding of the selected Telecommunications Carrier's responsibilities in Australia (obligations under the SOCI Act-Act and Telecommunication Carrier requirements here -https://lnkd.in/g4Wr4RNS). #followers   

7

Sharing an important update from Pentagram Advisory Pty Ltd. We are developing a new (and very timely) course for our eLearning Hub: Foreign Interference: Understanding the Risk to Australia’s Critical Infrastructure. The scale of the challenge cannot be understated or ignored.  Data speaks for itself: ASIO has disrupted 24 major espionage and foreign interference operations in just three years, with the cost of foreign espionage to Australia estimated at more than A$12.5 billion in a single year. These are not abstract numbers. They demonstrate the vector of the threat and confirm that the problem is active, costly, and intensifying. Critical infrastructure companies have an important role to play. Trust must be at the centre of the response.  When staff know they will be supported, not judged, they are far more likely to come forward early if they experience an unusual approach. That trust can transform a moment of uncertainty into protective action that safeguards both people and the crticial systems Australians rely on. Launching in September 2025. #SOCI #InsiderThreat #ForeignInterference #eLearning #Security

9

Important considerations and insights from Dominika - why most cyber incidents still occur as a result of human error. Generic training, misplaced trust on compliance over risk management, rushed decisions, and ignoring warning signs under pressure are all precursors - what organisations and leaders can do to address.

24

1 Comment

Cybersecurity in the not-for-profit sector is a governance obligation. I was chatting recently with a colleague connected with the Australian Defence Force, and it reminded me how intentionally information security is treated in Defence environments — clear ownership, clear controls, and defined expectations (for example, aligning to maturity baselines such as Essential Eight ML2 concepts). Afterwards, I found myself thinking about the not-for-profit and community services sector — especially because I live in a region with a large number of community services organisations, and I know how much sensitive information is handled here every day. Client records. Health and wellbeing notes. Case information. Addresses. Risk assessments. Staff and financial records. A simple question keeps coming up: Do we actually know who has access to private information — and why? In Australia, this isn’t just an IT problem. It’s a governance, risk, and duty-of-care responsibility, owned by the organisation’s board / management committee (with obligations often linked to the ACNC Governance Standards and, where applicable, the Privacy Act 1988 / Notifiable Data Breaches scheme). What’s often misunderstood is roles: Board (above the line): sets risk appetite, requires visibility, defines the maturity target, and backs the investment Leadership: owns the security program day-to-day, assigns accountability, drives culture, and makes risk decisions Vendors (below the line): deliver services and implement controls — but do not own the risk and should not be left to “run” security by default The board’s job isn’t to outsource control. It’s to enable leadership to control — and back them. And if a vendor is the only one who understands the environment, governance visibility is already too low. Nothing different from any other part of the organisational culture. Serious breaches can trigger mandatory notifications, regulatory action, loss of trust, and potentially significant civil penalties for the organisation — and “we suspected an issue but didn’t act” is not a position any board wants to defend later. Board question: Do you know your cyber maturity level?

2