Craig Brain

Craig has extensive security risk management expertise, and over 30 years’ experience in Defence intelligence operations, protective security, and security threat and risk analysis.

Craig is an internationally qualified trusted insider threat and risk program manager and is a contributor to Standards Australia on the topics of Workforce/employment screening, and Security-related risk management (HB4811:2022 and HB167:2025). He has extensive experience in the Defence, aviation, commercial, government and ICT/data sectors (in particular the Hosting Certification Framework). Craig routinely provides advice on the Defence Industry Security Program (DISP), and is able to advise on the applications of both the Protective Security Policy Framework and the Defence Security Principles Framework and how they apply to DISP. He has worked in Australia and internationally.

He has provided advice and input into key reference documents, programs and standards guiding Australia’s national security and has a keen interest in emerging security threats and innovative ways for organisations to mitigate these.