In Australia’s National Interest - Security of Critical Infrastructure

What do 19th-century textile workers and today’s AI-disrupted employees have in common? More than you might think. In this episode, we explore the fascinating parallels between the Luddite movement and modern insider threats triggered by the rapid adoption of AI in the workplace. Drawing from recent research and historical insights, we unpack how fear, uncertainty, and loss of control can fuel sab...

In the workplace setting an employer provides money and / or other benefits to a person in exchange for their labour, knowledge, and time.  The relationship is formally set out in a contract which details obligations that fall upon both the employer and employee, contractor or volunteer – a principle known as  quid pro quo .  Examples of obligations include an employer providing a safe workplace,...

In February 2025 the United States National Counterintelligence and Security Center (or NCSC) released a report titled  Insider Threat Mitigation for U.S. Critical Infrastructure Entities – Guidelines from an Intelligence Perspective .  Pentagram Advisory is flagging this report with our followers because the report is equally valid for Australia’s critical infrastructure owners and operators, as...

When does a trusted employee become a risk?   Insider threats do not emerge overnight—they are often the result of a gradual shift driven by workplace and personal factors. While organisations focus on technical defences, they can overlook the human element: the psychosocial hazards that can turn loyal employees into potential insider threats.  Join Pentagram Advisory as we discuss real-world case...

In an era of rising security threats, how do organisations ensure the integrity of the people entrusted with critical infrastructure? From workforce screening to insider threat mitigation, the security of critical workers is paramount. In this episode, we explore the  Critical Worker Identification and Management Framework , a structured approach to identifying, vetting, and monitoring individuals...

As geopolitical tensions rise and the Trump administration reshapes U.S. security policies, Australia faces increasing scrutiny over insider threats within its workforce and supply chains. This episode, based on insights from Timothy Slattery, a former senior official in Australia's army, intelligence, and national security community, explores the national security implications of safeguarding...

"The problem with collective responsibility is that it often leads to collective irresponsibility,"  said Michael Novak. Nowhere is this more evident than in the way many organisations manage  insider threats - fragmented across departments, lacking clear ownership, and often deprioritised. In this episode,  Marina Shteinberg and Timothy Slattery from Pentagram Advisory  explore why insi...

On 29 January 2025 the Commonwealth Government awarded a grant to CI-ISAC for it to establish and operate an Australian Health Cyber Sharing Network (HCSN) which will offer assistance to all entities in the health sector. Pentagram is a foundation partner to CI-ISAC in the establishment and delivery of the HCSN. CI-ISAC will deliver cyber threat intelligence (CTI) and related cyber security advice...

Quantum science, especially quantum computing, presents both risks and opportunities. In this podcast Pentagram discusses how the threat that quantum is likely to pose to Australia's critical infrastructure might be mitigated by utilising the intent of Australia's Security or Critical Infrastructure Act 2018 (SOCI Act) and it's Critical Infrastructure Risk Management Program. Spoiler a...

Australia faces a critical shortage of psychologists, a challenge with profound consequences for mental health, national security, and workforce resilience. In this episode, we explore the growing demand for psychological expertise post-COVID, the impact of this shortage on workforce assurance, and the risks posed to national security and critical infrastructure. Using real-world examples, such as...

In this episode, Pentagram Advisory delves into the evolving challenges of insider threats in the modern era. With advances in technology enabling unprecedented levels of harm, we explore how Australia and its key ally, the United States, are addressing these risks across national security, critical infrastructure, and enterprise levels. Discover insights from Tom Homan, former U.S. official, on t...

In recent months you may have heard increasing discussion of the threats that quantum computing could pose to cyber security Explore the evolving risks of quantum computing for critical infrastructure with Dr. Rajiv Shah , Managing Director of MDR Security . In this episode, we decode the threats posed by quantum advancements, the implications for encryption, and practical steps for organisations...

Join Pentagram Advisory as we explore the latest updates on the Security of Critical Infrastructure (SOCI) Act compliance landscape. Discover: insights into the SOCI Audit Program launched by the Cyber and Infrastructure Security Centre in December 2024 outcomes of the 2024 SOCI trial audits CIRMP annual reporting trends, and actionable lessons for critical infrastructure entities. Learn how exter...

The Cyber Security Legislative Package Decoded: Key Implications for Critical Infrastructure This episode, brought to you by Timothy Slattery and Marina Shteinberg from Pentagram Advisory, delves into: Key measures introduced by the  Cyber Security Act 2024  and amendments to the  Security of Critical Infrastructure Act 2018 (SOCI Act) , reshaping Australia’s approach to cyber security. This episo...

On 29 November 2024, the   Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Act 2024  received Royal Assent, bringing significant changes to the  Security of Critical Infrastructure Act 2018 (SOCI Act). One key update impacts responsible entities for critical infrastructure assets. If a data storage system used in connection with a critical inf...

Explore the risks of solar storms to critical infrastructure in this episode as we delve into how geomagnetic storms, like the infamous Carrington Event, can disrupt power grids, telecommunications, and navigation systems. With Solar Cycle 25 peaking in 2025, discover the potential impacts and practical strategies for Australian critical infrastructure entities to enhance resilience and mitigate r...

Join Marc Ablong, Managing Partner of Geostrategic Risk Partners, and Marina Shteinberg, Director and Co-Founder of Pentagram Advisory, in this thought-provoking discussion on the future threat landscape.   This episode explores emerging threats and vulnerabilities that will shape the next decade, focusing on critical infrastructure resilience. Key topics include: Advances in artificial intelligen...

Join Marc Ablong, Managing Partner of Geostrategic Risk Partners, and Timothy Slattery, Director and Co-Founder of Pentagram Advisory, for an insightful discussion on current geopolitical risks.   In this episode, we delve into Indo-Pacific security and its significance for Australia and its domestic environment. Key topics include: The role of Indonesia and its newly elected president, Prabowo Su...

Positioning, Navigation, and Timing: A Security Concern for Australia's Critical Infrastructure Explore the often-overlooked but critical role of Positioning, Navigation, and Timing (PNT) in securing Australia's critical infrastructure. Join experts from  FrontierSI and Pentagram Advisory  as they discuss the challenges, vulnerabilities, and solutions associated with PNT systems across essential s...

Join Marc Ablong, Managing Partner of Geostrategic Risk Partners, and Marina Shteinberg, Director and Co-Founder of Pentagram Advisory, for an engaging discussion on today’s pressing geopolitical risks.   This episode covers dynamic challenges shaping the global landscape, with a focus on their implications for critical infrastructure. Key topics include: The war in Ukraine and its lessons for Aus...

Insider threats are often misunderstood, with many organisations associating them solely with espionage or cyber incidents. However, threats like corruption, insider trading, workplace sabotage, and even bullying are interconnected risks impacting organisations' resilience. In this episode, we unpack real-world cases to show how insider threats emerge and explore proactive strategies for mitigatio...

"Understanding Insider Threats: Lessons from History and Modern Challenges" Join us as Timothy Slattery, director and co-founder of Pentagram Advisory, who served in Australia’s army, intelligence, and national security community for 37 years, delves into the pervasive issue of insider threats. Drawing on historical context, societal shifts, and rapid technological advancements, this episode explo...

This podcast episode is essential listening for security leaders and practitioners seeking practical strategies to strengthen supply chain security, address insider threats, and fortify critical infrastructure while aligning with SOCI regulatory requirements.

In today’s episode, we tackle one of the most challenging areas for organisations—supply chain risk management. As the backbone of critical infrastructure, supply chains are increasingly exposed to sophisticated insider threats, third-party risks, and state-sponsored attacks.   From high-profile incidents involving insider threats at Qantas and Leipzig-Halle Airport to the global impact of the MOV...

What comprises Australia’s national interest, and how does the risk of insider threat activity in Australia’s critical infrastructure connect to Australia’s national interest?