Articles by Sagar Kamra on Australian cyber security, compliance and the frameworks that shape them.
Latest
A practical guide for Australian responsible entities on the Security of Critical Infrastructure (SOCI) Act 2018 and Critical Infrastructure Risk Management Program (CIRMP) obligations, scope, hazards, reporting timelines and how to align…
Read articleEight years is a long time in cybersecurity. ASD has confirmed the Essential Eight is being replaced, gradually, by a new principles-based Essentials series. Here's what's changing, what it means for IRAP…
Read articleA field-level view of how the ACSC ISM evolved from its 2019 foundation through the pandemic, Essential Eight uplift, Zero Trust and AI adoption, and what the next 12 months look like.
Read articleA high-level, minimal-wording, easy-to-present summary of the ACSC ISM's quarterly updates from March 2025 to a predicted March 2026, from the ISM restructure through third-party and crypto tightening, identity uplift, AI controls…
Read articleHow the ACSC ISM's 2025 quarterly updates (March, June and September) align with NIST SP 800-53 Rev 2 and the Risk Management Framework, while extending beyond it into AI, post-quantum cryptography and…
Read articleA point-by-point mapping of the March, June and September 2025 ACSC ISM updates to NIST 800-53 Rev 2 control families and Risk Management Framework steps, with a note on where the ISM…
Read articleA structured, budget-conscious approach for not-for-profits to build secure and scalable software systems aligned with ASD Essential 8, ISO 27001 and IRAP, covering governance, identity, application and data security, cloud, endpoints, monitoring,…
Read article