Horizon 2: What the Government's new Cyber Security Action Plan means for your organisation

Here's what the Australian Government's Horizon 2 cybersecurity action plan means for organisations of every size.

SPHERE 2026 - Podcast Episode 8: Tom Huth & Ryan McLaren

Tom Huth and Ryan McLaren discuss energy sector cyber resilience, emphasizing collaboration, realistic simulations, and stronger cross-sector coordination.

SPHERE 2026 - Podcast Episode 7: James Blakely, Anthony Cooke, and Michael Boyd

James Blakeley, Anthony Cooke, Michael Boyd discuss how coordinated government support and information sharing strengthen cyber resilience, response, and prevention.

SPHERE 2026 - Podcast Episode 6: Jeremy Kirk + James Taliento

Jeremy Kirk and James Taliento sat down to discuss how best to respond to Cybercrime becoming easier and more scalable.

SPHERE 2026 - Podcast Episode 5: Admiral Mike Rogers + Alastair MacGibbon

Admiral Mike Rogers and Alastair MacGibbon sit down to confront what it really means to build cyber resilience beyond crisis.

SPHERE 2026 - Podcast Episode 4: Chris Krebs

Chris Krebs brings a truly global, board-level lens to the cyber risk landscape in this one-on-one sit down.

The Top 5 Forgotten Privacy Issues in the Digital & AI Ecosystem

During Privacy Awareness Week, we’re highlighting five privacy issues that are frequently overlooked as organisations embrace digital platforms and AI.

SPHERE 2026 - Podcast Episode 3: Heather Osborne + Stefanie Luhrs

Heather Osborne and Stef Luhrs dig beneath headline breach costs to reveal where the real damage now sits.

SPHERE 2026 - Podcast Episode 2: LTGEN Michelle McGuinness & Stephanie Way

LTGEN Michelle McGuinness and Stephanie Way sit down to unpack Australia’s shift toward a whole‑of‑nation cyber posture.

SPHERE 2026 - Podcast Episode 1: Reece Corbett-Wilkins & Leah Pinto

Reece Corbett-Wilkins and Leah Pinto move the conversation beyond alarmism and toward practical readiness.

ASIC v FIIG – Australia’s cybersecurity expectations and the consequences of failure take shape

Under its AFSL, FIIG was entitled to provide financial product advice, asset trading and custodial/depository services to its client base.

Fast Start to 2026 Webinar

Your cyber priorities for 2026. Setting yourself up to launch into the New Year with a clear focus.

The importance of cybersecurity risk management and governance for small and mid-market organisations

In many small and mid-market organisations there is a noticeable lack of structured cybersecurity risk management...

Atmos submission on Horizon 2 of the Australian Cyber Security Strategy

We are proud to have contributed to the DHA consultation on Horizon 2 of the 2023–2030 Australian Cyber Security Strategy.

What’s anonymity got to do with it? APP 2, anonymity, pseudonymity and privacy.

It is time to take another look at APP 2 and the obligation that arises under it.

Be careful what you wish for: APP 11.3 and TOMs

What are the new APP 11.3 and TOMs requirements and how to address them in practice.

Mandatory Ransomware Payment Reporting - What the industry needs to know

Mandatory reporting of ransomware payment is now in place - we outline the requirements and challenges.

The practical complexities and risks (and best ways) of dealing with the changing use of access requests

Under APP 12 individuals have the right to access the personal information about them held by the organisation.

Indirect collections and the forgotten privacy obligations and resulting risks

Sharing data is a necessary part of doing business in today’s digital economy - we explore the forgotten privacy obligations.

The Privacy Commissioner, the infringement notice and the low-tier civil penalty

The most impactful changes to the Privacy Act and what to consider.

A brief guide to technical and organisation measures under APP 11.3

From 11 December 2024 there is a new requirement in respect of the security obligations under APP 11.

Reducing privacy risk and operating costs through data deletion and de-identification

Organisations must take steps to destroy or de-identify personal data under APPs 11.2 and 11.3 when no longer needed.

Statutory tort for serious invasions of privacy

Unpacking the key elements of the new tort, who is affected, and what this means for your organisation.