Services
Enterprise risk expertise drawn from 30+ years of real-world leadership across 40+ countries.
Enquire NowOne method, disclosed, across every service on this page
Every service on this page is delivered against the same forensic methodology: tested, checked, challenged and put on the record, built to survive being read back years later by someone who wasn't in the room. It rests on six disciplines applied to every material finding: test it, check it, challenge it, critique it, ask the questions that haven't been asked, and seek clarification rather than assume.
Read the full methodology →Specialist services
Enterprise risk expertise drawn from 30+ years of accountable leadership across 40+ countries. Not frameworks recycled from a textbook. Not generic consulting outputs. Bespoke, practitioner-led work that is defensible, actionable and proportionate to the actual risk. Each engagement is scoped to your situation, not a pre-packaged methodology.
Enterprise Risk Governance
Designing and embedding risk governance frameworks that hold up under regulatory scrutiny, board-level examination, and real-world incidents.
- Risk appetite and tolerance frameworks
- Board and executive risk reporting
- Policy, procedure and standards architecture
- Risk culture assessment and uplift
Critical Infrastructure, SOCI/CIRMP & TSRMP
Australia's Security of Critical Infrastructure (SOCI) Act, Critical Infrastructure Risk Management Programme (CIRMP) and Telecommunications Security and Risk Management Programme (TSRMP) obligations are complex, and the enhanced CIRMP regime raises the bar again from 2026. I've done this work operationally — not just advised on it.
- CIRMP and TSRMP development and implementation
- Sector-specific SOCI compliance review
- Responsible Entity obligations
- Uplift planning and gap analysis
Travel Risk & Duty of Care (ISO 31030)
Organisations sending people to high-risk locations face significant legal, reputational, and moral obligations. ISO 31030 provides the framework — I provide the operational expertise to make it work.
- Travel risk policy and programme design
- ISO 31030 gap assessments
- Duty of care frameworks
- Pre-travel briefings and country risk assessments
Board & Executive Advisory
Providing boards, C-suite executives, and senior leadership teams with direct, frank, experience-based risk advice. No fluff. No vague recommendations. No recycled matrices.
- Board risk committee support
- Executive risk briefings
- Strategic risk identification and framing
- Crisis scenario planning and war-gaming
Expert Witness Engagements
Retained expert witness in international investment arbitration (Tethyan Copper Company v Islamic Republic of Pakistan, ICSID Case No ARB/12/1, USD 6 billion mandate) and in Supreme Court personal injury litigation, providing formal evidence under a signed duty to the court on foreseeability, threat-and-location-specific risk assessment, and employer duty of care.
- Expert reports and affidavits
- Concurrent evidence (hot tubbing)
- Risk management standard of care opinions
- Security and safety failure analysis
Bespoke Intelligence & Risk Assessment
Scalable, defensible risk intelligence built around your actual situation, source-graded to the Admiralty Code — not generic threat reports or open-source summaries repackaged as insight.
- Country and location risk assessments
- Defensible Risk Briefs (DRB), from A$2,500
- Scalable intelligence collection
- Threat landscape analysis for specific sectors
Contested Assurance
A wargaming-derived exercise and assurance programme for critical infrastructure. Adjudicated, rated ASSURANCE, PARTIAL or THEATRE, built to find what a scripted tabletop exercise is designed to protect.
- Diagnostic rating of your current exercise programme
- Purpose-built, adjudicated exercises against a named obligation
- Standing red-team and board assurance reporting
- Built on UK Ministry of Defence wargaming doctrine
Research & Analytics
The methodological discipline behind every other service on this page, systematic literature review, meta-analysis, scientometrics, and legislative and regulatory review, delivered at AQF Level 9 researcher standing, with current PhD candidature working toward AQF Level 10.
- Systematic literature review and meta-analysis
- Scientometrics and evidence-base mapping
- Legislative and regulatory review
- Methodological support for postgraduate researchers
Artificial Intelligence
Independent, pragmatic AI advisory built on nearly a decade of hands-on applied use, not a service launched to catch a trend. Governance, pilot programmes, information security analysis and risk-informed decision-making, for boards and executives exposed to vendor-driven AI claims.
- AI governance frameworks and readiness diagnostics
- Pilot programme design and information security analysis
- Risk-informed decision-making and terms of reference
- Model, script and agent build support
Security Management
Physical and personnel security risk assessment and operational security command, built on direct command of 3,500+ security personnel across remote and high-threat sites, not desk-based theory.
- Physical & personnel security risk assessment
- Remote and high-threat site security
- VIP and executive protective security
- Security management plan & programme design
Risk Management
Applied, ground-level risk assessment and evacuation and travel risk planning, delivered across 40+ countries and carried personally in EL2, CRO-equivalent and audit committee roles.
- Applied risk assessment (site, project, travel)
- Evacuation planning
- Risk management programme design & uplift
- Standing risk advisory
Crisis Management
Crisis management plan development, simulation and tabletop exercise design, built on six years directing real incident and evacuation response across 40+ countries.
- Crisis management plan development
- Crisis simulation & tabletop exercise design
- Executive crisis management training
- Standing crisis advisory / on-call retainer
PROCESS
How an engagement works
No intake forms. No sales team. Three steps.
1. Initial enquiry
You outline the situation through the contact form.
2. Scoping conversation
A short exchange establishes scope, fit and format. No commitment. If it is not the right match, that is said clearly, and where the work can be done internally that is said too.
3. Engagement and delivery
Work is scoped, priced on the defensibility carried, and begins once scope is agreed.
Free · Practitioner-level · Weekly
Not ready to engage yet? Stay informed.
Tony's LinkedIn newsletter has 19,500 subscribers across risk, security, and resilience practice. Free, no spam, unsubscribe any time.
Subscribe on LinkedInReady to act now?
A bespoke retainer or corporate engagement starts with a scoping conversation below. If you want value today, you can activate immediately.
Advisory retainers and corporate engagements are scoped and priced on enquiry.
Start a scoping conversation.
Outline your situation through the contact form. A short exchange establishes scope, fit and format. No commitment required.
Contact & Enquiry Form Request via LinkedIn Listen to the Podcast