Ross Phillipson

Regulatory signal: APRA is moving from implementation to demonstrable resilience - with deeper supervision of cyber, AI, critical operations, common technology platforms and material service providers.

The Privacy Commissioner’s recent report on her determination on AMEX in relation to insider security risk is a timely reminder that insider threat is not just an employment, cyber or conduct issue. It is also a privacy issue and, for many …

Australia has become a key destination for data centre developers, investors and operators seeking exposure to long-term digital infrastructure growth.

Boards are being told, in increasingly direct terms, that AI-enabled cyber risk and geopolitical risk are no longer separate emerging-risk issues.

As AI accelerates vulnerability discovery, OT-heavy businesses face new governance challenges. Explore the implications for boards and GCs.

The final report on the independent review into the Security of Critical Infrastructure Act 2018 (SOCI Act), conducted by Dr Jill Slay AM, was delivered on 2 February 2026 and was subsequently made public on 25 March 2026 (the Report). The …

Mythos AI signals faster cyber threats. Why boards must act now on governance, risk, disclosure and resilience in an era of AI-driven vulnerabilities. Visit Gilbert + Tobin for more.

Anthropic’s Mythos-class AI marks a leap in automated cyber attacks, accelerating vulnerability discovery and forcing boards to rethink cyber risk, governance, and defence strategies. Visit Gilbert + Tobin to find out more.

Cyber risk is now a governance issue. We outline five priorities for GCs navigating geopolitics, SOCI obligations and rising regulatory expectations. Visit Gilbert + Tobin for more.

On 25 March 2026 , the Minister for Home Affairs opened consultation on two significant reforms to the Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act): proposed amendments to the Ministerial Directions Powers under Part 3 of t…

On Monday, the Australian Government published its Expectations of Data Centres and AI Infrastructure Developers. The expectations set out the government's position on what it expects from the sector. They effectively codify the social lice…

The escalating armed conflict in the Middle East has materially increased cyber risk for Australian organisations. War, coupled with broader geopolitical tensions, has driven a significant increase in state-sponsored cyberattacks, targeting…

ART overturns Privacy Commissioner, holding Bunnings’ facial recognition use was permitted under the Privacy Act, with lessons for business. Read more at Gilbert + Tobin.