Homepage Featured Articles Section
Most people learn the CIA Triad as a textbook definition: Confidentiality, Integrity, Availability. Three pillars. Three bullet points. Three exam terms. But the triad isn’t just something you memorise, it’s something you use. It’s a mental model you carry with you while you investigate alerts, respond to incidents, assess risks, and explain security issues to
How to Think About the CIA Triad During Real Security Work Read More »
Tax season is when Australians are most vulnerable to scams, and scammers know it. Every year, thousands of people receive fake ATO and myGov messages designed to steal refunds, personal information, or access to accounts. If you work, lodge, or claim anything through myGov, these scams are aimed directly at you. I write a lot
ATO Tax Scams: How to Spot One and What to Look Out For Read More »
Whenever I run a tabletop exercise, the first thing I do is set the tone for the room. I tell everyone that this is not a test and it’s not about catching anyone out. It’s a safe space to walk through our policies, procedures, and decision‑making as a team. The goal is to explore how we work, not judge how anyone performs.
This article isn’t just a guide, it’s a complete, modern Incident Response Plan aligned to NIST CSF 2.0. A full, real‑world IRP you can use as a reference, benchmark, or starting point for your own organisation.
How to Build an Incident Response Plan: A Complete NIST CSF 2.0 Example Read More »
Most people enter tech with a HECS debt, a personal loan, or a quiet sense of financial dread. I accidentally did the opposite. Every qualification I’ve earned, TAFE, university, under‑grad and post‑grad ended up costing me almost nothing. Not because I’m a genius. Not because I gamed the system. But because I learned one simple
