Who it's for

Built for the people accountable for critical infrastructure compliance.

Four buyer profiles. Each carries a different slice of the s.30AC obligation. cirmp AI gives every one of them a working surface they can sign their name against.

Each profile below maps to a panel in the engine demo. Pick the buyer most like you and follow the pack assembly from their angle.

Group CISOs

the primary buyer carrying s.30AC accountability

  • See every control reference, every artefact and every reasoning step on a single screen, ready for board attestation.
  • Carry the four-hazard obligation across both OT and IT estates without two different vendors trying to own it.
  • Walk into audit week with the signed pack already assembled, cited, and board-attested. The export is the answer, ready before the question.

Compliance Managers

the daily user assembling and reviewing

  • cirmp AI is being built to read the exports your team already pulls from Dragos, Claroty, ServiceNow IRM, Sentinel and CrowdStrike. The engine maps them to the Rules 2023 once the adapter for that source is live.
  • Walk each hazard panel, accept or annotate the engine's mapping, attach extra evidence when needed.
  • Drive every draft to ready-for-sign-off without a 40-tab spreadsheet.
  • Keep the cycle moving between board meetings, not just the week before.

Auditors and Boards

the readers of the signed export

  • A read-only view of every signed export, with no risk of touching the working record.
  • Designed so you can open any control reference and see the full reasoning trace, the human approval, and any override justification.
  • Run the offline verification routine to confirm the signed JSON, the PDF and the audit chain match.
  • An artefact a CISC reviewer (Cyber and Infrastructure Security Centre) can reconstruct end to end without picking up the phone.

Indigenous Data Custodians

and CARE Principles communities of practice

  • CARE Principles being encoded into the evidence taxonomy. Collective Benefit, Authority to Control, Responsibility, Ethics.
  • Critical infrastructure routinely implicates Indigenous data through water assets on country, energy corridors crossing Aboriginal lands and supply chains touching Indigenous-owned enterprises.
  • Any artefact touching Indigenous data holdings is routed to the right custodian before assessment, with the custodial decision captured in the reasoning trace.
  • 9t5 is engaging an Indigenous data governance advisor as a paid Phase 1 engagement so the encoding is real, not decorative.

Ready to look inside

See cirmp AI run on a real CIRMP cycle.

Three minutes inside the demo. A live walkthrough on request. You will see what the next CIRMP attestation looks like when it writes itself.

See the live demo Back to overview