Security consulting for Commonwealth agencies and Defence industry suppliers: ISM and PSPF alignment, IRAP preparation, DISP uplift and sovereign hosting advice. We are a fully Australian-owned company and have worked through the same requirements ourselves.
Global Sentynel is Australian owned, and all we do is cyber security. We have helped Australian enterprise and critical infrastructure prepare for IRAP assessments, as well as working as auditors in previous lives.
For agencies, we work to the ISM and PSPF and prepare systems for IRAP assessment, including alignment with the whole-of-government cloud policy that took effect on 1 July 2026 and the Commonwealth's mandatory AI requirements. Note that we currently do not conduct IRAP assessments, as this would constitute a conflict.
For Defence suppliers, the Cyber Uplift Program for Defence Industry and the Cyber Security Operations and Data priority in the 2026 Defence Industry Development Strategy drives how important data security is for Defence. In practice that means the DISP Cyber Security Questionnaire and Essential Eight Maturity Level 2, which we help you achieve. Where AI systems need sovereign handling, we have a framework built for ISM and DSPF environments.
System documentation, control implementation and evidence, built against the ISM so the assessment holds no surprises. Includes whole-of-government cloud policy alignment and data residency decisions.
The Cyber Security Questionnaire and the Maturity Level 2 uplift behind it, for suppliers entering or staying in DISP.
Security assurance for AI-enabled capability: agent identity and delegation, continuous assurance of probabilistic systems, and our purpose built AI security framework for ISM and DSPF environments.
We have decades of experience in enterprise and cloud security, helping organisations prepare for external auditors. The IT security discipline and approach remains very similar between industries; it's just that the data secured and the impact of failure are of a different magnitude.
We bring current, hands-on work securing enterprise and frontier AI inside APRA regulated entities, state government and critical infrastructure operators. Systems that serve millions of Australians.
Australian owned, Melbourne based, with an Australian practitioner network.
Security-cleared staff and founders.
Whether you are an agency preparing a system for assessment or a supplier working towards DISP, the first conversation costs nothing and we will tell you plainly whether we are the right fit.