Blog posts

The Australian Prudential Regulation Authority (APRA) has signalled a definitive shift for Australia’s financial sector, making it crystal clear that artificial intelligence (AI) governance is no longer just an IT productivity initiative. For banks, insurers, and superannuation trustees, AI has officially become a frontline strategic and operational risk issue demanding direct board accountability, executive oversight,…

Meeting the regulatory and governance expectations of the Australian Securities and Investments Commission (ASIC) and the Australian Securities Exchange (ASX) is a non-negotiable responsibility for the board of any listed entity in Australia. These standards are engineered to enforce transparency, safeguard stakeholder interests, and cultivate a robust corporate culture. Is Your Board Meeting the Governance…

The NSW Auditor-General’s recent report, Security and Privacy of Student Information, carries vital lessons for every school board in Australia, whether operating across the government, Catholic, or independent sectors. Student Data Security is Now a Board Responsibility Although the audit evaluated NSW public schools, the core governance challenges it uncovered are universal across education. Every school…

The latest cyber security incident involving Ernst & Young (EY) serves as a stark reminder that cyber resilience is no longer merely an operational IT task, it is a critical governance obligation – Why Security Architecture Matters More Than Ever. According to breach notifications filed by EY, an unauthorised third party gained access to a…

Whether it is a multi-national listed corporation, SME, an independent school council, a public sector healthcare board, or a grassroots not-for-profit (NFP) organisation, the arrival of a new director is a high-stakes moment – The First 100 Days. Yet, across all sectors, the process of onboarding new directors is frequently treated as an administrative box-ticking…

A recent, highly concerning disclosure from New South Wales ,Australia has cast a sharp light on the unique data vulnerabilities facing the educational sector. According to a NSW Auditor-General report, a security shortcoming within the state’s Department of Education allowed two high school students to access approximately 2,000 highly sensitive files over a three-month period….

The recent disclosure by the University of Western Australia (UWA) that student information was exposed through inadvertently published system credentials, marking their second data breach in six months, serves as a stark reminder to the entire education sector. Cyber security is no longer an isolated technical concern; it is a fundamental governance imperative. This applies to Corporations,…

The Five Eyes cyber security agencies, representing Australia, the US, the UK, Canada, and New Zealand -recently issued a joint statement with a stark, unified warning to corporate leaders: The timeline for AI-driven cyber risk is no longer measured in years, but months. The AI Threat Horizon. As frontier AI models rapidly lower barriers for malicious actors,…

Australian boards have never carried a heavier load. The regulatory landscape is moving at an unprecedented velocity, from the comprehensive overhauls of the Privacy Act 1988 to ASIC’s intensified disclosure mandates and the stringent expectations of the Cyber Security Act 2024. Yet, as the Australian Institute of Company Directors (AICD) recently highlighted in their analysis, “Why Australian boards can’t…

The Australian corporate sector is facing another massive integrity crisis. Just as the dust was beginning to settle on previous consulting scandals, KPMG Australia has been rocked by an explosive whistleblower controversy that has forced the immediate resignations of CEO Andrew Yates and National Managing Partner for Audit and Assurance Julian McPherson. The KPMG Whistleblower…