IBRSiQ December 2025

December’s focus shifts toward pragmatic governance, balancing AI adoption and cyber resilience by simplifying processes and prioritising foundational security controls.

IBRSiQ is a database of Client inquiries, designed to prompt discussions with our advisors about these topics in the context of your organisation, providing tailored advice to meet your needs.

Overview

The past month’s inquiries highlight a strong focus among IBRS clients on optimising ICT operations and bolstering cyber resilience. In particular, cyber has once again surged in interest, though artificial intelligence continues to be a leading trend. Combined, these two primary issues are driving interest in balancing ‘value’ of innovation and governance.

Topical Inquiries

Solve

Uplifting ICT Procurement Security – Addressing Supply Chain Threats

A federal government institute needed to refine its supply chain threat questionnaires to align with legislation and security controls. IBRS provided a detailed review of internal and external vendor assessment documents, ensuring compliance with the PGPA Act and FOCI risk guidance. Key recommendations included mandatory exclusion criteria for vendors failing to meet critical security requirements and ways to  enhance procurement decision-making.

Advisor: Andrew Fox – Request document reviews with Andrew

Enhancing Cyber Security Framework

A hospitality organisation sought to improve alignment with its cyber security framework. This requirement was driven by a planned migration from the Google Workspaces environment to Microsoft 365. Based on review of the organisation’s existing cyber security policy and documentation, IBRS advised adopting the CIS Critical Security Controls (CIS18) framework, specifically focusing on the 56 foundational Safeguards in Implementation Group 1 (IG1). This provided the organisation with a prioritised and simplified approach for policy creation and baseline measurement, crucial for a mid-sized business establishing formal controls amidst a substantial technology platform migration and the related impact to information management.

Advisor: Andrew Fox – Request a call with Andrew

Plan

Identify AI Skills and Copilot Usage and Training Needs

A federal government agency required assistance in planning their AI skills development amid a Microsoft Copilot rollout. IBRS conducted an AI skills survey and in-depth interviews, producing a comprehensive report with recommendations. This assessment helped the client understand their current capabilities and identify areas for improvement in their AI adoption and training programme. The assessment also sought to understand the use cases and challenges of using AI within individual departments.

Advisor: David Beal –  Request assistance from David

Business Process Mapping for Operational Transformation

A local government council needed to scale its service reviews from RACI charts to business process models. IBRS presented a framework for business process mapping (BPM), covering strategy, capability mapping, detailed analysis, and stakeholder engagement. The advice emphasised simplifying processes before automation to achieve long-term efficiency, clear accountability, and effective system selection.

Advisor: Andrew Fox –  Request a call with Andrew

Explore

Recalibrating Information Management Strategy

A federal government authority sought to define requirements for a new ‘manage-in-place’ information management solution. IBRS advised pulling back from its unrealistic, and unbudgeted, expectations for auto-classification and procurement of third party products. Instead, IBRS recommended developing a formal business case focusing on staff productivity and cost savings, with a pragmatic future state centered around a SharePoint migration to centralise content. While this would not result in a ‘best in class’ solution, it would provide a critical stepping stone for future information management improvements, while staying within budget and staffing constraints.

Advisor: Dr Joseph Sweeney – Request a call with Dr Sweeney

Hottest Topics

Document Reviews

  • Supply Chain Threat Questionnaire Review for PGPA Act Compliance
  • Review of AI Investigation Tools Against Police AI Principles
  • IGB Assurance Framework Review: Briefing Paper Feedback
  • Revised IT Steering Committee Charter Review

Whiteboard Sessions

  • Post-Incident Recovery Strategy Workshop: Client gained actionable insights and a risk-based DR strategy following infrastructure refresh.
  • Strategic AI Integration for Workforce Development: Formulated a Copilot rollout strategy, training programme recommendations, and key improvement areas.
  • Leadership Team AI Market Insights: Clarified the nuances of AI types, agentic AI limitations, and market bubble potential.
  • Programme Management Resolution: Defined project prioritisation and provided strategies to address internal resistance effectively.
  • Client Solution Brainstorm: Client gained actionable support strategies, identified key challenges, and outlined immediate next steps for resolution.
  • Project Management Session Outcomes: Established actionable support strategies, clarified project scope, and identified key success metrics for future initiatives.
  • Operating Model Refinement Workshop: The collaborative session clarified operating model complexities, providing the client with a refined, agreed-upon framework.

Trouble viewing this article?

Search

Register for complimentary membership where you will receive:
  • Complimentary research
  • Free vendor analysis
  • Invitations to events and webinars
Delivered to your inbox each week