Session Title: From Compliance To Capability: Making Cyber Security Frameworks Work In Practice
Cyber security frameworks and standards such as the Essential Eight, Australian ISM, ISO 27001, NIST Cyber Security Framework, and PCI DSS provide valuable guidance for managing cyber risk and demonstrating compliance. However, many organisations struggle to translate compliance activities into meaningful security outcomes. This presentation will explore how organisations can move beyond a checklist-driven approach and use these frameworks as tools for building sustainable security capabilities. Through practical examples and industry observations, the session will discuss how to align governance, risk management, and operational security activities to achieve measurable improvements in resilience rather than simply meeting compliance obligations.
Attendees will gain practical insights into:
- Moving beyond “tick-the-box” compliance activities
- Using cyber security frameworks to support risk-based decision-making
- Building sustainable security capabilities that deliver measurable business and security outcomes
- Avoiding common pitfalls when implementing compliance and assurance programs
Participants will have the opportunity to ask questions of the speaker and networking drinks with light refreshments will be served after the presentation.
Speaker:
Maria Hadi - Manager, Value Assurance at Land Services Victoria, Department of Transport and Planning
Maria Hadi is a cyber security, risk, and assurance professional with experience across governance, compliance, security assessments, operational resilience, and technology assurance. She currently leads Value Assurance activities within Land Services Victoria and has worked extensively with industry and government cyber security frameworks and standards, including the Essential Eight, ISM, ISO 27001, PCI DSS, and NIST. Maria is passionate about helping organisations translate compliance obligations into meaningful security outcomes and sustainable capability uplift.
Date: Tuesday 11 August 2026
Time: 5:30pm - 8:00pm (AEST)
Agenda:
5:15pm - 5:30pm Registration
5:30pm - 6:30pm Presentation
6:30pm - 8:00pm Networking and light refreshments
Venue: Le Meridien, Vaudeville Room, 20 Bourke Street, Melbourne
Registrations close: 10 August 2026 or earlier if event is sold out prior
Cost to attend:
Registration is free for AISA members
Non Members: $115.50 (incl GST)
Not an AISA member? Become a member today!
How to register:
1. Members must be signed in to register
2. To register for this event click on the Register Myself button
3. Click on confirmed registration button
5. A confirmation of the order will be emailed to you once your registration is confirmed OR payment has been made
REMINDER: If you are unable to attend after registering, please send an email to [email protected] requesting your registration for this event be cancelled. This will release your place for another member to participate.
If you have any queries regarding this event, please contact AISA Events Team at [email protected]
Disclaimer:
AISA presentations are intended for educational purposes only. Statements of fact and opinions expressed are those of the participants individually and, unless expressly stated to the contrary, are not the opinion or position of AISA, its sponsors, or its partners. AISA does not endorse or approve, and assumes no responsibility for, the content, accuracy or completeness of the information presented. Attendees should note that sessions may be recorded and published in various media, including print, audio and video formats without further notice.