Elliot Dellys

Head of Governance, Risk & Compliance

Elliot has led major security accreditation and certification programs across Critical Infrastructure, Defence, Motorsport and Government, and previously headed a global cybersecurity firm's Strategic Consulting practice across Europe, the Middle East and Africa.

Talk to an expert

Highlights

Career highlights

‍

Virtual CISO for an Australian critical infrastructure provider, with $2.2 billion in assets and an annual turnover of approximately AUD$400 million. Led an ISM accreditation program for 11 different onboard and on-base systems to support a fleet of RAAF aircraft – all systems successfully accredited, with delivery to schedule and within budget.

Designed and led a successful multi-year ISO27001 certification program for the world’s premier motorsports racing company. Led a department-wide Victorian Protective Data Security Standard (VPDSS) compliance program for one of the State’s largest departments. The scope and quality of the assessment received a commendation by the Office of the Victorian Information Commissioner.

Formerly led the Strategic Consulting practice across the Europe, Middle East and Africa (EMEA) region for a global cybersecurity firm, recognised as a leader by Gartner and Forrester. Maintained a 10.0 Net Promotor Score rating across the region.

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Host Header Injection

Silverstripe CMS is affected by a Host Header Injection flaw, which can be exploited to manipulate password reset workflows, potentially redirecting or compromising user data.

FarCry Core Framework - Multiple Issues

FarCry Core contains multiple vulnerabilities that could let unauthenticated users upload arbitrary files and execute remote code on the hosting server.

Silverstripe – Cross-Site Scripting (XSS) Vulnerability

With local organisation admin credentials, an attacker can exploit the API to create, delete, or revert virtual machine snapshots in other organisations’ Virtual Data Centres (VDCs), breaching isolation boundaries.

Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness sharpens instincts and turns everyday staff into assets.

Advisory

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making and resilient operations.

Are you experiencing a security breach?

Incident Response