Jurisdiction of Control in the Hosting Certification Framework, Strategic Tier
Which legal entity holds each certification at the Hosting Certification Framework's Strategic tier, and which jurisdiction controls it, resolved on primary ownership records for all 28 certified providers.
Jurisdictional Exposure of Commonwealth Bank Cloud and Model Dependencies
A jurisdictional exposure assessment of the Commonwealth Bank of Australia's dependence on United States incorporated cloud and AI-model providers, across two exposures: compellability of data and availability of models.
The Compellability Gap in Commonwealth Cloud Assurance
An assessment of two Commonwealth instruments — the FOCI guidance and the Hosting Certification Framework — and whether either tests if a certified provider can be lawfully compelled by a foreign government.
Broadcom Structural Exposure Assessment
A jurisdictional assessment of Commonwealth dependence on VMware products contracted through corporate entities controlled by Broadcom Inc.
The Jurisdiction Gap
How existing regulatory frameworks leave Australian institutional data exposed to foreign legal reach, and what would close the gap. A submission to the Senate inquiry into artificial intelligence and data centres.
Telstra CLOUD Act Assessment
A jurisdictional exposure assessment of an Australian critical telecommunications carrier under the Security of Critical Infrastructure Act 2018.