National Infrastructure Assurance

Context

Regulated and safety-adjacent operating environment; audit survivability and bounded failure as design constraints.

Architecture problem

Establishing enforceable segmentation and governance aligned to zero trust principles, reducing blast radius while preserving operational throughput.

Context

National critical infrastructure operator with full-stack architecture ownership spanning cloud, on-premises, and OT/SCADA systems across multiple markets and operational domains. Audit survivability, bounded failure, and regulatory compliance under Black Start and SOCI Act obligations were treated as first-order design constraints. Details abstracted in line with sensitivity requirements.

Role and mandate

Architect across Platform Engineering, DevSecOps covering OT/SCADA security, on-premises systems, and cyber governance — a scope typically distributed across multiple architects. Design authority across infrastructure and security domains aligned to ASD Essential 8, IRAP, NIST CSF, and ISM.

Decisions and trade-offs

• Control hierarchy designed for enforceability across heterogeneous estates.
• Zero trust approach emphasising explicit verification, least privilege, and continuous policy enforcement.
• Identity-first architecture prioritised to simplify policy and reduce exception paths.
• Resilience treated as a control surface (containment, recovery, and assured degradation).

Outcomes

• Reduced systemic risk via tighter failure-domain boundaries and governance enforcement.
• Improved auditability through standardised control evidence pathways.
• Improved recoverability assumptions and operational survivability.