From Attestation to Assurance: What the New CIRMP Annual Reporting Questions Signal About the Future of Critical Infrastructure Governance

In this episode, Tim Slattery and Marina Shteinberg from Pentagram Advisory explore what the recently updated CIRMP annual reporting form may reveal about the evolving expectations of the Department of Home Affairs surrounding governance, operational resilience, assurance, and Board accountability under the Security of Critical Infrastructure Act 2018.The discussion examines the broader shift from compliance-focused attestation toward evidence-based assurance, including what the expanded reporting requirements may mean for Boards, senior executives, and responsible entities preparing for the FY2025–26 CIRMP reporting cycle.