Case study: Converging physical and cyber security — lessons from the protective security assessment framework

Abstract

As digital transformation accelerates across government and critical infrastructure, the convergence of physical, information and personnel security has emerged as a strategic imperative. This paper explores the evolving landscape of security risk management, where traditionally siloed functions are increasingly integrated to counter hybrid threats, foreign interference and insider risks.1,2 Drawing on contemporary frameworks, including the NSW Premier’s Department Protective Security Assessment Framework3 and international guidance from agencies such as Cybersecurity and Infrastructure Security Agency (CISA), the paper examines how convergence enhances resilience, streamlines governance and fosters a unified security culture. Through analysis of operational models, governance structures and a case example, it highlights the benefits of cross-functional collaboration, executive sponsorship and shared accountability. It argues that convergence is not merely a structural adjustment, but a paradigm shift in how security is conceptualised, coordinated and executed. The findings support a proactive, intelligence-led approach to protective security that aligns with national critical functions and reinforces public trust in institutional integrity. This article is also included in The Business & Management Collection which can be accessed at https://hstalks.com/business/.