Blog
Weekly notes from practice.
Short, opinionated posts on cybersecurity, GRC and digital transformation — published weekly.
Post
ASD Essentials Is Here. Don't Start Your Security Programme Again
A new framework doesn't mean starting again. Here's how to use ASD Essentials, keep existing commitments and make the first 30 days count.
Read postPost15 Oct 2026
ASD Essentials, Week 2: One Uplift, Shared Evidence, Lower Duplication
The deep dive: cohort-specific adoption, integrated Essential Eight ML2 uplift, reusable evidence and a percentage-only three-year TCO model with explicit assumptions.
Read postPost15 Oct 2026
ASD Essentials, Week 1: What Changes, and What to Do First
The short briefing: what ASD Essentials changes, why existing Essential Eight obligations still matter, and five practical first moves before starting another programme.
Read postPost14 July 2026
Essential Eight Is Re-Inventing
ASD just pulled the plug on the Essential Eight. Here's what that means for your roadmap, your IRAP, and your Monday morning — in under two minutes.
Read post