top of page


The Medicare AI incident: a case for better guardrails, not less AI
Recent headlines about an OpenAI agent accessing an Australian government Medicare statistics portal have understandably caused concern. The incident deserves scrutiny. An AI agent gained unauthorised access to non-public aggregate health statistics and internal files on 18 June. The government says there is no evidence that personal Medicare records were accessed, or that the wider Services Australia network was compromised. However, the delay in reporting the incident was r

Frank Sunthorn
Sep 303 min read


AI needs an early-warning system. So do businesses.
Australia’s cyber intelligence chief, Abigail Bradshaw, has called for an AI “early warning system”: a way to connect individual incidents, spot emerging patterns and share warnings before a problem becomes widespread. ABC News reported on the comments here. The national conversation is important. But there is also a practical lesson for every organisation using AI today. Most businesses do not need a sophisticated intelligence capability tomorrow. They do need a reliable way

Frank Sunthorn
Sep 211 min read


The AI model isn’t the whole system
When organisations assess agentic AI, most attention still goes to the model. New guidance from the Australian Signals Directorate (ASD)makes an important point: the model is only part of the risk. ASD uses the term “harness” for the software layer connecting an AI model to organisational data, tools, memory and systems. That distinction matters. A chatbot produces content. An AI agent may search files, access customer information, call APIs, update records or initiate action

Frank Sunthorn
Sep 141 min read
bottom of page