Governance and Risk
Sets direction and accountability.
You know the risk is realDo you know where you stand?
Independent cybersecurity and responsible AI advice for Australian organisations, led by a former CISO.
Start with your question
Where we'd start
Audit and Assessment
We review your controls against the framework your auditor will use, then identify the evidence and actions needed to prepare.
What you’ll walk away with
- A clear view of readiness and outstanding gaps
- Actions ranked by risk and assessment priorities
- Evidence organised and ready to hand over
The right support. At every step.
Read more
Audit and Assessment
Proves your controls work.
Privacy and Data Protection
Protects personal information.
Responsible AI
Keeps AI use safe and accountable.
Cybersecurity Uplift
Strengthens the controls themselves.
Incident Resilience
Keeps you running when something gets through.
Independent advice, practical outcomes
Independent advice
Clear advice based on your risks, obligations and priorities, with no product or platform sales.
Senior experience
Former CISO experience across governance, assurance, responsible AI and incident response.
Clear priorities
Understand the evidence, the priorities and what your team needs to do next.
Collaborative delivery
An agreed scope, clear communication and practical help to move the work forward.
Why our customers love us
“I couldn’t recommend them highly enough. The execution and professionalism is second to none.”
Senior practitioner expertise
Kat McCrabb
Founder, Flame Tree Cyber
Kat McCrabb spent more than 16 years advising government, education, health and regulated organisations. As a CISO she owned security strategy, AI rollouts, regulatory alignment and incident oversight, and reported it all to the board.
Book a 30-minute callSharp news, secure views
Subscribe for practical cybersecurity and responsible AI insights.
We only use your email to send you Flame Tree Cyber insights.
What you'll receive
- Plain-English updates on cybersecurity and privacy developments
- Practical guidance on responsible AI and governance
- Advice from senior practitioners with hands-on CISO experience
Who we help
Education
Schools, early learning and education offices protecting student and family information.
Healthcare
Primary health networks and care providers keeping patient information safe.
Not-for-profit
Charities and community services protecting donor and client data on a careful budget.
Local government
Councils keeping essential services running and community trust intact.
Practical insights for your next decision
Responsible AI
Responsible AI principles in practice
Put AI governance principles into everyday decisions and processes.
Incident readiness
Tabletop exercises for incident readiness
Explore how a practical exercise can test roles, decisions and response plans.
Security culture
Changing cybersecurity behaviour with user prompts
Consider how timely prompts can support better security decisions.
Find out where you stand in 30 minutes
Talk with a senior practitioner about your situation, obligations and priorities. We can help you identify a practical starting point.
Or call
We only use your details to reply to you.