Case Studies

Client:

Victorian Government – Department of Premier and Cabinet (DPC)
Enterprise Solutions Branch (ESB)

Sector:

Government | Cyber Security | Critical Infrastructure | Public Safety

Executive Summary:

The Victorian Government engaged our consultants to assess the rapidly escalating cyber threat environment and design a leading-edge, whole-of-government Cyber Security Agency. At the time of engagement, cyber incidents were growing exponentially, while central cyber capability across government remained severely underresourced and fragmented. We delivered a comprehensive threat assessment, capability framework, organisational design, and implementation roadmap, enabling the State to move from a reactive posture toward a coordinated, resilient, and future-ready cyber security capability. The work directly informed the recommended establishment of a strategically staffed Cyber Security Agency aligned to global best practice and government operating realities.

Client:

Victorian Government – Department of Premier and Cabinet (DPC)
Enterprise Solutions Branch (ESB)

Sector:

Government | ICT Capability | Data Security | Digital Resilience | Risk & Assurance

Executive Summary:

The Victorian Government engaged our consultants to support the development of a whole-of-government ICT Capability Upskilling Plan under Action 26 of the Victorian Government Information Technology Strategy. At the time of engagement, the public sector faced increasing dependence on digital systems, escalating cyber and data risks, and uneven ICT capability across departments and roles.


While technology investment across government was accelerating, data security, privacy, resilience, and risk management capability had not kept pace. ICT
decision-making was often fragmented, project delivery inconsistent, and procurement approaches exposed government to heightened operational, financial, and reputational risk.


We delivered a comprehensive capability framework and uplift approach focused on embedding security-by-design, strengthening data stewardship, and building institutional resilience across the Victorian Public Service (VPS). The work enabled government to move from a technology-centric view of ICT toward acapability-driven, risk-aware, and security-conscious operating model, aligned with regulator expectations and public accountability obligations.