Perth cyber security

What drives security spending in Perth. Resources, and everything that serves resources. Mining and energy operators, the engineering and services firms around them, and the ports and rail that move the product. Perth also carries a significant and growing defence presence through HMAS Stirling and Australia's AUKUS submarine commitments.

This produces a security problem that genuinely looks different to the eastern states. Operational technology sits alongside corporate IT, remote sites have patchy connectivity and maintenance windows measured in months rather than hours, and a control system outage is counted in lost production rather than lost email. A test scoped as though you were a Sydney office building will miss the things that actually matter.

The frameworks that come up most.

• Security of Critical Infrastructure Act, and Perth has more captured assets per capita than anywhere else. Energy, ports, water and data storage operators carry risk management programme obligations and mandatory incident reporting, tightened again by the 2025 amendments.
• DISP membership for the defence supply chain, which is growing quickly around Henderson and Rockingham.
• ISO 27001, increasingly demanded by corporate parents, joint venture partners and tier one contractors regardless of any regulatory obligation.
• ASD Essential Eight as a practical baseline, particularly for Western Australian Government suppliers.
• Cyber Security Act 2024 ransomware payment reporting, in force since 30 May 2025 for businesses over $3 million turnover, with a 72 hour deadline.

A scoping note worth reading before you buy anything. If your environment includes operational technology, say so at the scoping call. A standard corporate penetration test scoped without reference to your control systems produces a report that satisfies nobody, and in the worst case an active test against fragile equipment causes the outage it was meant to prevent. We would rather have that conversation before you sign than explain it afterwards, and we are comfortable running a passive assessment where active testing carries real operational risk, stating clearly which findings we could not verify as a result.

CREST Accredited Penetration Testing in Perth

Siege Cyber is a CREST-accredited company for penetration testing. The accreditation is assessed and held at company level and is verifiable on the CREST member register. In Perth that matters most in resources, where mining and energy operators apply the same supply chain assurance to their technology vendors that they apply to everything else on site.

On the time difference. We are Brisbane based, which is two hours ahead of Perth for most of the year. We schedule Perth engagements to overlap your morning rather than ours, because a status call at 6am your time is not a service.