Kiran Kewalramani 
The Booking.com breach has done more than expose millions of travelers’ data — it has exposed something far more uncomfortable: the gaps that boards are still not governing. Here’s what that looks like in the Booking.com context. The Booking.com Breach and the Risk Document That Doesn’t Exist After a breach like this, someone will eventually … Read more
When a board tells me they can’t find a CISO, they’re revealing something unintended. 75% of Australian CISOs face excessive expectations. 68% witnessed burnout this year. When candidates see boards treating cyber as compliance and CISOs as liability absorbers, they decline. What boards read as talent shortage is often the market’s verdict on the role … Read more
Your cybersecurity investments may be creating new vulnerabilities,and most boards never see it coming. Here’s a pattern I’ve watched play out across boardrooms for years. You’ll recognise it instantly. A board approves a significant cyber budget increase. Usually after a near-miss. Or a breach in their sector that made headlines. The money flows. Compliance boxes … Read more
For many Australian business leaders, the conversation around cyber security often feels like it belongs in the server room, not the boardroom. It’s…
In today’s unpredictable landscape, the ability to withstand disruption is no longer a luxury reserved for large corporations-it’s a fundamental…
In the modern Australian business landscape, your data is more than just information; it is the currency of your growth and the foundation of client…
In today’s complex digital landscape, navigating Australian cybersecurity requirements can feel like a significant challenge. For many business…
The Evolving Landscape of Application Security Challenges Application security continues to evolve rapidly as technology advances and threat actors develop increasingly sophisticated methods. As we look ahead to 2026, organisations face new and complex challenges that require proactive measures. Understanding what application security entails and identifying emerging threats will be crucial for maintaining robust defence … Read more
Here’s the question directors should ask this quarter: If an AI tool can be “talked into” doing the wrong thing, who carries the risk when the business acts on it? AI is now embedded in daily operations: customer chatbots, internal “ask me anything” tools, copilots for code, and decision-support dashboards. Attackers have noticed. The World … Read more
Modern cyber threats demand more than basic security, Australian organisations need robust, field-tested defences. The Essential Eight framework from the Australian Cyber Security Centre (ACSC) provides a focused approach to cyber defence-but implementing it effectively requires understanding the technical details, assessment process, and real-world application. Understanding the Essential Eight Controls in Depth The Essential Eight … Read more
