Daryl Sheppard

Daryl Sheppard is a senior cyber security professional with over 20 years’ experience across government and industry, spanning technical, assurance, and leadership roles. He is an accredited IRAP Assessor and holds CISSP and CISA certifications.

He specialises in threat modelling, cyber risk, and intelligence-led security, applying structured, adversary-informed methodologies such as PASTA to analyse threats, vulnerabilities, and business impact. His work emphasises integrating cyber threat intelligence into governance, risk, and compliance (GRC) to support decision-centric, risk-based security beyond compliance-driven approaches.

Operating within the Australian context, Daryl has extensive experience aligning security practices with frameworks including the ACSC Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF). He has developed enterprise security architectures, continuous assurance models, and approaches for articulating cyber risk at both operational and executive levels.

Daryl is also an experienced educator and presenter, delivering training and speaking at industry conferences and forums. His focus is on translating complex cyber security concepts into practical, actionable insights.

He is currently undertaking a PhD examining the human dimensions of cyber resilience and socio-technical security.