top of page


Understanding AI Governance Framework Costs and AI Compliance Costs
When you dive into the world of AI governance, one thing quickly becomes clear: managing AI responsibly is not just about technology. It’s about structure, rules, and costs . Organisations need a solid framework to ensure that AI systems comply with regulations, protects data, and maintain trust. What is needed? And how much does this cost? And what drives those costs? I’m here to break down the essentials of AI governance framework costs and the broader AI compliance costs

David Roberts
Mar 24 min read


Comprehensive Guide to Online Data Protection Audits and Data Protection Assessment
In today’s digital world, protecting sensitive data is not just a good practice—it’s a necessity. Every organisation handling personal or confidential information must ensure their data governance and privacy measures are airtight. That’s where a data protection assessment comes in. It’s your roadmap to identifying risks, closing gaps, and proving compliance with regulations. If you want to build trust and operational efficiency, mastering this process is non-negotiable. Let

David Roberts
Feb 25 min read


Understanding Data Security Posture Management (DSPM) for Privacy Professionals
What is Data Security Posture Management (DSPM)? Data Security Posture Management (DSPM) is an emerging term coined by Gartner. It represents a new category of solutions focused on protecting personal information and sensitive data. DSPM sits at the intersection of cybersecurity and privacy, making it crucial for organizations today. This document explains DSPM and why it is essential for privacy professionals. The Importance of DSPM In today's digital landscape, data breache

David Roberts
Jan 152 min read


Understanding Reasonable Steps in Data Protection: Insights from ASIC and OAIC
Key Insights from Recent Cases Insights from a number of recent cases have shed light on what ASIC and OAIC define as reasonable steps in protecting personal information. The attached Whitepaper expands on a panel discussion at Cyber Con 2025. This discussion explored the learnings from these cases and provided tips to turn those learnings into practical action for both boards and executives. What Are Reasonable Steps? The insights include several key points: Reasonable steps

David Roberts
Dec 1, 20252 min read


Third-party cyber incidents are surging — and the risks are closer than you think.
According to a new iTnews report, NSW Government agencies have seen third-party linked cyber incidents quadruple in just two years . In...

David Roberts
Sep 19, 20251 min read
The OAIC’s Privacy Crackdown: Read on if your organisation collects, shares, analyses, or even “anonymises” customer data — whether that’s through websites, adtech, customer platforms, or AI
The Australian privacy regulator has just fired its strongest warning shot yet. If your organisation collects, shares, analyses, or even...

David Roberts
Aug 6, 20252 min read


Why Data Governance Belongs in the Boardroom: A Snapshot of the ACID Framework
This whitepaer by the AICD offers some great insights into data governance for a boards and executives. Data is now one of your...

David Roberts
Jul 1, 20252 min read


Preliminary Lessons from the Super Fund Data Breaches
Last week, several of Australia’s largest superannuation funds — including some of the the largest, by membership size: Australian Super;...

David Roberts
Apr 9, 20252 min read


Protect your customers financial data and personal information: Preventing the FIIG Securities Data Breach
How Automated PI Data Scanning and Security Posture Management Could Have Helped The recent case of ASIC suing FIIG Securities Limited...

David Roberts
Mar 13, 20252 min read


Insight into cyber-crime-aaS
The deletion of the stolen Medibank data from Zservers in Russia is a window into the industrialisation of global cyber crime and...

David Roberts
Feb 13, 20251 min read
Securiti Named a Leader in Frost & Sullivan's DSPM Report: Why It's Time for Action
The latest Frost & Sullivan report on Data Security Posture Management (DSPM) has recognised our partner Securiti as a leader in this...

David Roberts
Jan 20, 20252 min read


Unstructured Data: The unknown risk
Recording of a webinar describing a case study for remediating the risk of unstrucutred data: https://links.securiti.ai/discussing-unstru...

David Roberts
Nov 27, 20241 min read


Data Governance: Operational Controls to Protect Personal Information
Here's a presentation on Data Governance I gave to the Sydney IAPP KnowledgeNet Chapter today. The key points: Data is both an asset and...

David Roberts
Jul 4, 20241 min read
Data security and third-party risk management gaps in Australian organisations
If the latest Cyber Pulse survey from AISC is indicative of Australian organisations there is still a way to go in cyber maturity and...

David Roberts
Feb 7, 20242 min read


Tik Tok being investigated by OAIC....
The recent media about the OAIC investigation into personal information leakage via TIk Tok raises a much broader issue. The risk of data...

David Roberts
Jan 18, 20241 min read


Big gaps in data governance
In a recent report on Data Governance by the Governance Institute of Australia there were some concerning findings, such as: - Nearly 60%...

David Roberts
Dec 6, 20232 min read


Privacy without Boarders
A guide to expanding internationally for A&NZ Organisations This Webinar recording and material will: help you better understand key...

David Roberts
Nov 17, 20231 min read
bottom of page
