# elevenm.com.au > AI-optimized mirror of elevenm.com.au containing 50 pages totalling 29,754 words of clean markdown content, structured data, and semantic HTML. Original source: https://elevenm.com.au/. Last updated: 2026-06-15T00:21:11.386Z. Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG). ## Homepage - [Homepage](/content/site-root.html): elevenM has joined ctrl:cyber. Same experts. Expanded capability. Read more ↗ (188 words) ## Articles & Blog Posts - [blog/childrens-privacy/index.html](/content/blog/childrens-privacy/index.html) (1 words) - [Transparency](/content/blog/privacy-awareness-week-2025/index.html): This year for Privacy Awareness Week, we unpacked some current issues in privacy – from automated decision-making to facial recognition technology to pentesting-for-privacy and many other topics in between., This year for Privacy Awareness Week, we unpacked some current issues in privacy – from automated decision-making to facial recognition technology to pentesting-for-privacy and many other topics in between. (1,423 words) - [What is legal professional privilege?](/content/blog/check-your-privilege-legal-professional-privilege-in-the-context-of-cyber-incidents.html): elevenM’s Tom Kench looks at the reasons behind Optus’ failed claim for legal professional privilege (LPP) to provide advice about how organisations can maximise their prospects of claiming LPP in the context of data breach response., elevenM’s Tom Kench looks at the reasons behind Optus’ failed claim for legal professional privilege (LPP) to provide advice about how organisations can maximise their prospects of claiming LPP in the context of data breach response. (1,957 words) - [privacy/index.html](/content/privacy/index.html) (1 words) - [blog/category/privacy/index.html](/content/blog/category/privacy/index.html) (1 words) - [AI governance frameworks v assessments — what’s the difference?](/content/blog/whats-in-an-ai-risk-assessment/index.html): elevenM Manager Piotr Debowski breaks down what is involved in an AI risk assessment, where they fit within an overall AI governance framework and why privacy professionals might find them more familiar than they first thought., elevenM Manager Piotr Debowski breaks down what is involved in an AI risk assessment, where they fit within an overall AI governance framework and why privacy professionals might find them more familiar than they first thought. (1,662 words) - [blog/head-to-head-the-gdpr-and-the-australian-privacy-principles-part-1-the-long-arm-of-the-law.html](/content/blog/head-to-head-the-gdpr-and-the-australian-privacy-principles-part-1-the-long-arm-of-the-law.html) (1 words) - [Gap analysis – Comparing the GDPR and Australian Privacy Principles](/content/blog/head-to-head-the-gdpr-and-the-australian-privacy-principles-part-2-a-tale-of-two-jurisdictions.html): Comparison of the GDPR to the the Australian Privacy Principles Part 2, Comparison of the GDPR to the the Australian Privacy Principles Part 2 (2,021 words) - [New report reveals AI is exceeding the expectations of Australian SMEs, but many face a range of adoption barriers that they need help to overcome  - elevenM | A ctrl:cyber Company](/content/blog/new-report-reveals-ai-is-exceeding-the-expectations-of-australian-smes-but-many-face-a-range-of-adoption-barriers-that-they-need-help-to-overcome.html): Generative AI is the use case for Australian small and medium enterprises (SMEs) and is exceeding expectations, according to the majority of respondents to a new survey. But lower levels of AI awareness, a lack of accuracy and quality in AI outputs, and concerns around data risk remain key inhibitors. , Generative AI is the use case for Australian small and medium enterprises (SMEs) and is exceeding expectations, according to the majority of respondents to a new survey. But lower levels of AI awareness, a lack of accuracy and quality in AI outputs, and concerns around data risk remain key inhibitors.  (600 words) - [blog/5-things-you-need-to-know-about-gdprs-data-protection-officer-requirement.html](/content/blog/5-things-you-need-to-know-about-gdprs-data-protection-officer-requirement.html) (1 words) - [[News round-up March 2021 — That horrible Exchange compromise, IOT security threats made real and digital platforms’ latest privacy challenges](/content/blog/news-round-up-march-2021-that-horrible-exchange-compromise-iot-security-threats-made-real-and-digital-platforms-latest-privacy-challenges/index.html)](/content/blog/category/news/index.html): Struggling to keep up with the news? The elevenM News Roundup is a curated selection of recent cyber and privacy stories, with the team’s analysis of key business risk implications and takeaways. (927 words) - [Facebook and Cambridge Analytica: Would the Apps or the GDPR Have Helped?](/content/blog/facebook-and-cambridge-analytica-would-the-apps-or-the-gdpr-have-helped.html): It’s a modern-day truism that when you use a “free” online service, you’re still paying – not with your money, but with your personal information. This is (1,541 words) - [What data brokers do](/content/blog/the-alchemy-of-data-brokers/index.html): elevenM’s Jonathan Gadir unpacks what it is that data brokers actually do, and how they manage to fly under the radar of privacy law., elevenM’s Jonathan Gadir unpacks what it is that data brokers actually do, and how they manage to fly under the radar of privacy law. (1,269 words) - [How did we get here?](/content/blog/hard-delete/index.html): elevenM’s Cassie Findlay on how hard, and how important, it is to formally and systematically delete unnecessary data and records., elevenM’s Cassie Findlay on how hard, and how important, it is to formally and systematically delete unnecessary data and records. (1,180 words) - [[The key to bringing focus to your cyber program](/content/blog/the-key-to-bringing-focus-to-your-cyber-program/index.html)](/content/blog/index.html): Note to website admins: this is a placeholder page and should be published with visibility set to "public". (634 words) - [Do your homework](/content/blog/a-lesson-in-data-privacy-you-cant-cram-for-gdpr-by-sheila-m-fitzpatrick.html): Deadlines are a powerful motivator. While travelling the world over the past year, including here in Australia, I’ve been energized by the discussions that (1,162 words) - [Shortfalls of an untested security implementation](/content/blog/how-to-ensure-penetration-testing-addresses-privacy-risk.html): elevenM’s Nick Allen makes the case for privacy and cyber to start working together, and steps you through how to facilitate privacy-informed penetration testing., elevenM’s Nick Allen makes the case for privacy and cyber to start working together, and steps you through how to facilitate privacy-informed penetration testing. (1,225 words) - [The 23andMe cautionary tale](/content/blog/practical-data-governance-for-merging-health-enterprises.html): elevenM's Melanie Marks, Cassie Findlay and Rahul Prasad discuss the dangers of not including data governance in merger-planning, and set out steps to take to ensure you do., elevenM's Melanie Marks, Cassie Findlay and Rahul Prasad discuss the dangers of not including data governance in merger-planning, and set out steps to take to ensure you do. (1,198 words) - [Best practice tips for preparing for security threats posed by Quantum Computing](/content/blog/why-quantum-computing-is-not-just-a-future-problem-for-security-teams.html): elevenM’s Rahul Prasad explains what security teams can do today to prepare for the future emergence of quantum computing., elevenM’s Rahul Prasad explains what security teams can do today to prepare for the future emergence of quantum computing. (770 words) - [Additional $14M in funding to the Office of the Australian Information Commissioner (OAIC)](/content/blog/looking-at-privacy-and-cyber-in-the-2025-26-budget/index.html): The Australian Government’s 2025-26 budget was released on Tuesday. In this short blog post, elevenM’s Piotr Debowski has a look at some of the privacy, cyber security and tech wins and losses., The Australian Government’s 2025-26 budget was released on Tuesday. In this short blog post, elevenM’s Piotr Debowski has a look at some of the privacy, cyber security and tech wins and losses. (951 words) - [**What is a pacing threat?**](/content/blog/the-key-to-bringing-focus-to-your-cyber-program/index.html): elevenM’s Jonathan Topham and Arjun Ramachandran explain the concept of a "pacing threat" and how it can be used to guide investment and deliver the most (796 words) - [Ten data governance hacks for healthcare providers to adopt AI safely - elevenM | A ctrl:cyber Company](/content/blog/ten-data-governance-hacks-for-healthcare-providers-to-adopt-ai-safely.html): elevenM Director Melanie Marks shares key tips for AI governance in healthcare from her recent presentation at the Digital Health Festival 2025 in Melbourne. (560 words) - [Open roles](/content/about-us/careers/index.html): We're always looking to partner with talented people. If you'd like to learn more about working with us, please get in touch. (128 words) - [So, what went wrong?](/content/blog/dont-bet-on-forgiveness-spam-still-on-the-acmas-slip-in-new-financial-year.html): elevenM’s Emma Mackenzie unpacks the ACMA’s recent spam ruling against TAB, highlighting key lessons in Spam Act compliance for all Australian organisations., elevenM’s Emma Mackenzie unpacks the ACMA’s recent spam ruling against TAB, highlighting key lessons in Spam Act compliance for all Australian organisations. (660 words) - [Up close and personal with the Singaporean Cybersecurity Act - elevenM | A ctrl:cyber Company](/content/blog/up-close-with-the-singaporean-cybersecurity-act/index.html): Our thoughts on the new Singaporean Cybersecurity Act., Our thoughts on the new Singaporean Cybersecurity Act. (562 words) - [Australia Introduces Children's Online Privacy Code](/content/blog/how-to-build-a-digital-treehouse-where-children-are-free-to-play.html): Australia is set to introduce a Children's Online Privacy Code aimed at enhancing privacy protections for children engaging with digital platforms. elevenM participated in a consultation to assist in workshopping the inclusions, exclusions and APP interpretations in the code., Australia is set to introduce a Children's Online Privacy Code aimed at enhancing privacy protections for children engaging with digital platforms. elevenM participated in a consultation to assist in workshopping the inclusions, exclusions and APP interpretations in the code. (734 words) - [Get in touch](/content/contact/index.html): We’re now operating as part of ctrl:cyber, and all enquiries are managed through our unified team. Please use the contact details below and we’ll ensure (143 words) - [The key to bringing focus to your cyber program](/content/blog/category/cyber-security/index.html) (645 words) - [Cyber security veteran Steve Glynn joins elevenM - elevenM | A ctrl:cyber Company](/content/blog/cyber-security-veteran-steve-glynn-joins-elevenm/index.html): elevenM is excited to announce the appointment of respected cyber security veteran Steve Glynn as director. Steve will join elevenM director Peter Quigley in leading elevenM's cyber advisory practice, alongside director Melanie Marks who heads up elevenM’s privacy practice., elevenM is excited to announce the appointment of respected cyber security veteran Steve Glynn as director. Steve will join elevenM director Peter Quigley in leading elevenM's cyber advisory practice, alongside director Melanie Marks who heads up elevenM’s privacy practice. (362 words) - [elevenM has joined [ctrl:cyber](https://ctrl.co/).](/content/elevenm-has-joined-ctrlcyber/index.html) (183 words) - [Privacy, cyber security and AI eLearning](/content/services/elearning/index.html): Privacy and cyber security elearning tailored to your organisation, Privacy and cyber security elearning tailored to your organisation (402 words) - [Overview of APRA Publications](/content/blog/our-view-on-apras-new-information-security-regulation.html): elevenM's view on APRA’s new information security regulation CPS 234, elevenM's view on APRA’s new information security regulation CPS 234 (1,379 words) - [Melanie spoke to Bloomberg about driving competitive advantage from GDPR compliance - elevenM | A ctrl:cyber Company](/content/blog/melanie-spoke-to-bloomberg-about-driving-competitive-advantage-from-gdpr-compliance.html): It becomes a unique selling point or a point of differentiation that you can say ’our data practices are compliant with the GDPR'., It becomes a unique selling point or a point of differentiation that you can say ’our data practices are compliant with the GDPR'. (777 words) - [This does not (necessarily) mean the law will be reviewed](/content/blog/in-privacy-awareness-week-will-australia-follow-the-gdpr.html): Last week, the headlines told us that the senate backs GDPR style laws in Australia. (527 words) - [8 steps to a threat based defence model](/content/blog/8-steps-to-a-threat-based-defence-model/index.html): 8 steps to a threat based cyber defence model, 8 steps to a threat based cyber defence model (388 words) - [Practical data governance for merging health enterprises](/content/blog/category/data-governance/index.html) (611 words) - [Privacy](/content/services/index.html): elevenM helps you mitigate digital risks and build trust, with our service offerings across privacy, cyber security, data governance, strategic communications, awareness and training., elevenM helps you mitigate digital risks and build trust, with our service offerings across privacy, cyber security, data governance, strategic communications, awareness and training. (124 words) - [Locations for elevenM100](/content/locations-kml.html) (6 words) - [[Why every good CISO needs a cyber security strategy](/content/blog/every-ciso-needs-a-cyber-security-strategy/index.html)](/content/blog/category/uncategorized/index.html) (341 words) - [Our client for this engagement was a major Australian university.](/content/recent-work/data-governance-framework/index.html): Our client wished to better align its privacy and data governance advice, and to define key data governance roles. Our focus was on university teams and (213 words) - [Comparing Australia’s Privacy Act with the GDPR - elevenM | A ctrl:cyber Company](/content/blog/tim-compares-australias-privacy-act-with-the-gdpr/index.html): In this series by iapp, they look at laws from across the globe and matches them up against the EU General Data Protection Regulation. The aim being to help (167 words) - [Locations](/content/local-sitemap-xml.html) (2 words) - [What’s in an AI Risk Assessment?](/content/post-sitemap1-xml.html) (434 words) - [Our team](/content/about-us/index.html): We believe that trust rests on an organisation's ability to manage the privacy and security of their customers' information.  — Peter Quigley and Melanie Marks, We believe that trust rests on an organisation's ability to manage the privacy and security of their customers' information.  — Peter Quigley and Melanie Marks (84 words) - [category-sitemap-xml.html](/content/category-sitemap-xml.html) (14 words) - [page-sitemap-xml.html](/content/page-sitemap-xml.html) (161 words) - [post-sitemap2-xml.html](/content/post-sitemap2-xml.html) (24 words) - [sitemap_index-xml.html](/content/sitemap_index-xml.html) (10 words) - [Remember the principles](/content/blog/gdpr-is-here/index.html): If the recent flurry of emails from organisations sending privacy policy updates didn’t tip you off, the new EU General Data Protection Regulation (GDPR) (604 words) ## Resources - [Full Page Index](/index.html): Browse all cached pages with rich metadata - [About This Cache](/content/about.html): Methodology, technical details, and usage guidelines - [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery - [Robots.txt](/robots.txt): Crawler directives