Modernising Cyber Capability by Benchmarking Against Global Security Frameworks

Client Overview

A large Australian bank’s Cyber Security division, responsible for safeguarding critical systems and data across a global financial network. The unit supports both enterprise and customer-facing platforms and operates in a fast-evolving threat environment.

The Challenge

The division’s existing capability framework had become outdated and fragmented, making it difficult to assess current strengths, prioritise investment areas, or align roles to emerging security needs.

With increasing cyber threats and evolving regulatory expectations, the business needed a clear, validated view of the capabilities required to future-proof its cyber workforce.

The Solution

Ben led the review of the division’s capabilities by benchmarking against global frameworks including NIST/NICE and the Australian Signals Directorate (ASD) Cyber Skills Framework. This involved:

• Mapping existing roles and skills to industry-standard cybersecurity capability frameworks.
• Identifying capability gaps across functions such as threat intelligence, incident response, and security architecture.
• Creating an actionable capability uplift roadmap tailored to the organisation’s strategic priorities.

The work provided leadership with a grounded, external-facing model that could drive hiring, training, and organisational design decisions.

Results

• Delivered a validated cyber capability model aligned to global frameworks.
• Identified key gaps and uplift priorities to support workforce strategy.
• Positioned the division to embed capability planning into its security roadmap.

‍