Field notes.
Writing from the work — strategy, systems, delivery, and risk in regulated Australian enterprises.
- risk
CPS 230 is not a compliance project
APRA's operational resilience standard is written as an outcome, not a checklist. Treating it as paperwork produces paperwork — treating it as an engineering problem produces resilience.
- strategy
Where AI earns its place
Boards are not short of AI ambition or use-case lists. The missing artefact is a fundable path — a prioritised view of where AI earns its place, what it costs to run properly, and the governance that makes it defensible.
- build
Your AI is only as good as your data platform
Model quality has a ceiling, and it isn't the model. Lineage, access, and ownership — the unglamorous disciplines of the data platform — decide whether AI can be trusted at scale.
- optimise
FinOps when the regulator is watching
In a regulated enterprise, some of your most expensive architecture exists because a regulator expects it. Cost discipline starts with knowing which dollars are the floor and which are waste.
- optimise
What an AI interaction costs
AI spend has reached board level, but total spend is the wrong number to govern. The unit a board can actually manage is the cost of an interaction — measured honestly, governance premium included.
- strategy
Agentic AI, without the hype
An agent that acts is not a chat interface — it is an operational actor with access, permissions, and failure modes. Where agents earn their place in a regulated enterprise.
Want to discuss a topic directly?
Whether you are framing a board-level technology decision, scoping a platform build, or recovering a transformation that has stalled — we lead with senior judgement, not a sales pitch. The first conversation is always free.
Contact us