About
The Critical Path
The Critical Path is a knowledge hub for OT/IT cyber security professionals working in Australian critical infrastructure. It covers SOCI Act compliance, framework implementation, threat intelligence, and lessons from real engagements.
The content is structured around five pillars: Regulation (SOCI, TSRMP, CIRMP), Frameworks (AESCSF, AS 7770, IEC 62443), Threat Landscape (nation-state, ransomware, physical), Game Theory (GT-SMDN, network analysis), and Field Notes (anonymised lessons from the field).
O/IT Cyber
O/IT Cyber is an Australian cyber security consultancy specialising in critical infrastructure protection. We help responsible entities build and review risk management programs, achieve framework maturity, and bridge the gap between enterprise IT security and operational technology environments.
Our work spans the energy, telecommunications, water, transport, and defence sectors — wherever operational technology meets regulatory obligation.
Darragh Downey
Darragh Downey is the Principal Consultant at O/IT Cyber. His background spans OT/IT convergence, critical infrastructure risk assessment, and the intersection of safety engineering and cyber security.
The perspectives shared on The Critical Path come from direct experience conducting assessments, building risk management programs, and working with entities navigating Australia's evolving critical infrastructure regulatory landscape.