The Critical Path https://insights.ot-it-cyber.com/ Practical OT/IT cyber security guidance for critical infrastructure operators in Australia. en-au Essentials for Operational Technology: What We Know, and Why It Matters https://insights.ot-it-cyber.com/blog/essentials-for-operational-technology/ https://insights.ot-it-cyber.com/blog/essentials-for-operational-technology/ Sat, 08 Aug 2026 00:00:00 GMT ASD is replacing the Essential Eight with a domain-split Essentials series, and one chapter is written for operational technology. No draft exists yet. What is confirmed, what is not, why an outcomes-based model fits OT better than a maturity ladder, and what to do before it lands. The Essential Eight Is Being Retired: What It Means for Your CIRMP Nomination https://insights.ot-it-cyber.com/blog/essential-eight-retirement-cirmp/ https://insights.ot-it-cyber.com/blog/essential-eight-retirement-cirmp/ Sat, 08 Aug 2026 00:00:00 GMT ASD will retire the Essential Eight within about two years, replacing it with a domain-split Essentials series that includes an operational technology chapter. The Enhanced CIRMP Rules give you until June 2028 to comply with a nominated framework. Those two clocks overlap, and it changes what you should nominate. What Your TSRMP Needs to Contain for Telco Assets https://insights.ot-it-cyber.com/blog/tsrmp-telco-assets/ https://insights.ot-it-cyber.com/blog/tsrmp-telco-assets/ Wed, 24 Jun 2026 00:00:00 GMT Telecommunications assets have specific requirements under the SOCI Act TSRMP framework. What the risk management program needs to cover and where most entities leave gaps. Three Things Called "Enhanced" in Your SOCI Obligations https://insights.ot-it-cyber.com/blog/positive-obligation-vs-enhanced/ https://insights.ot-it-cyber.com/blog/positive-obligation-vs-enhanced/ Wed, 13 May 2026 00:00:00 GMT The regime now has three obligation layers and two of them are called enhanced. They apply to different populations, are triggered differently, and demand different things. Which ones you can look up today, and which one arrives privately. AESCSF Security Profile 2: What the Enhanced CIRMP Rules Now Require https://insights.ot-it-cyber.com/blog/aescsf-sp2-requirements/ https://insights.ot-it-cyber.com/blog/aescsf-sp2-requirements/ Wed, 29 Apr 2026 00:00:00 GMT The AESCSF has two scales and people mix them up. Maturity Indicator Levels measure where you are; Security Profiles say where you must be. The Enhanced CIRMP Rules move named energy asset classes to SP-2 by June 2028, and cumulative profiles make that further than it looks.