Kode-1
Industry

Critical Infrastructure.

Resilient-by-design technology for the operators the country cannot afford to lose.

SOCI ActCIRMPISO 42001NIST AI RMF
The work
Energy, water, transport, healthcare, and other critical-infrastructure operators face the most consequential cyber and resilience requirements in Australia. SOCI Act and the Critical Infrastructure Risk Management Program (CIRMP) require an integrated, board-defensible posture across cyber, physical, supply-chain, and personnel risk — and operators of these sectors have little tolerance for failed transformations. Kode-1 works with critical-infrastructure operators on the technology work that the regulator's expectations now demand: secure-by-design platforms, AI governance aligned to ISO 42001 and NIST AI RMF, modernisation roadmaps that maintain operational continuity, and assurance engagements that hold up to second-line review.
Where we work
  • Energy generators, transmitters, and retailers
  • Water utilities
  • Transport and logistics infrastructure operators
  • Critical services and government-adjacent operators captured under SOCI
What we lead on
  • SOCI Act and CIRMP risk-management programs
  • OT/IT convergence design
  • Cyber and security engineering for operational technology environments
  • Cloud strategy where it intersects with operational workloads
  • AI strategy and governance for operational use cases (predictive maintenance, network optimisation, demand forecasting)
  • Independent assurance for board and regulator
Representative engagements
  • CIRMP design and ongoing compliance
  • OT/IT convergence architecture and engineering
  • Operational technology cyber and security engineering
  • AI governance design for operational use cases
  • Independent assurance and board reporting
Where we engage
Think

Strategy & Architecture

Explore →
Build

Systems & Platforms

Explore →
Practice principle

Risk, Resilience & Assurance

Explore →

Our partners understand both the technology realities and the regulatory weight. CIRMP attestations carry board and personal liability. We design for the standard we know will hold up under that scrutiny.

Talk to a partner about critical infrastructure.

Whether you are framing a board-level technology decision, scoping a platform build, or recovering a transformation that has stalled — we lead with senior judgement, not a sales pitch. The first conversation is always free.

Contact us