Aceline works with business owners, executives and technology leaders who want AI to give real hours back to their people, without creating tomorrow's security problem. Senior, Australian-based expertise from strategy to delivery, with the governance and cyber foundations built in. Available for statement-of-work, advisory and contract engagements.
AI adoption leads the practice. Cyber resilience is what makes it safe to scale. The remaining domains are where the assurance depth comes from. Each is backed by delivered engagements, not capability statements.
AI adoption that pays for itself: opportunity discovery, pilots that measure the hours released, Copilot and generative AI enablement, shadow AI visibility, AI data security posture, and governance aligned to Australia's Guidance for AI Adoption and Privacy Act automated decision-making readiness. Take the 20-question Shadow AI Self-Assessment.
Security strategy and roadmap development, risk and maturity assessment, governance and compliance uplift, and executive advisory. Framework-aligned consulting that turns obligations into a defensible, funded program of work.
DR and BCP program development, cyber recovery capability, ransomware readiness, exercising programs and board-level resilience reporting, from business impact analysis through witnessed restore testing. Take the 20-question Cyber Resilience Self-Assessment.
Trust-centric insider risk programs built on original practice IP: behavioural risk intelligence that protects people and information without surveillance-first thinking. Non-punitive by design, privacy-preserving by architecture, including the new human-risk surface created by everyday AI use.
Architecture frameworks, security pattern suites, Zero Trust and identity strategy, cloud and integration security standards, adopted by engineering teams, aligned to your architecture practice, and defensible in review.
ISM and PSPF alignment, Essential Eight uplift to target maturity, and SOCI/CIRMP compliance for critical infrastructure entities. Assurance work that anticipates the assessor.
Three models, one standard of delivery: the person who scopes the work is the person who does it.
Defined outcomes delivered end to end: AI discovery, pilot and adoption programs with measured results, cyber resilience uplift, architecture frameworks, assessments and platform security workstreams.
Standing advisory to CISOs, CIOs and boards: roadmap ownership, assurance oversight, deal and RFP support, and a senior sounding board on retainer.
Principal consultant, security architect or program lead engagements. Daily rate, direct or through recruitment partners, security-cleared work considered.
Selected engagements. Client names available in conversation where confidentiality allows.
Designed the full enterprise Cyber Security Architecture Framework and security pattern suite (IAM, cloud, OT/ITS, integration, remote access and supply chain assurance), with Essential Eight uplift consulting and privileged access guidance.
Delivered disaster recovery and business continuity capability for a critical manufacturing execution system, safeguarding production infrastructure of national significance.
Delivered cyber transformation across the agency, spanning risk, governance and security operations uplift.
Led the APAC Integrated Risk Management capability and served as global lead for PCI DSS data centre compliance, covering enterprise risk, compliance and resilience programs across the region, alongside large-scale user transformation programs at HPE and IBM.
Leon Hutcheson is a principal cyber security consultant with deep senior practitioner delivery across government, critical infrastructure and enterprise, including HPE as IRM Director Asia Pacific and global PCI DSS lead, IBM Asia Pacific, Sun Microsystems and CSO Group Australia.
Trusted advisor to CIOs, CISOs and executive stakeholders, known for translating complex technical issues into clear business value, and for combining strategy, governance and delivery to win and execute complex engagements with measurable outcomes.
Trained at the Massachusetts Institute of Technology (MIT) in applied generative AI, with the practice deliberately positioned where the risk now lives: the intersection of cyber security, AI adoption and human behaviour.
| MIT, Applied Generative AI | AI security & governance |
| University of Oxford (Saïd Business School) | Cyber Security for Business Leaders |
| ISM · Essential Eight · PSPF | Australian Government frameworks |
| SOCI / CIRMP · ISO 22301 · NIST CSF · IEC 62443 | Critical infrastructure & resilience |
Wondering where AI would actually save your people time, and whether your foundations are ready for it? Direct conversation, a quick assessment of fit, and a straight answer on what is worth doing first. Recruiters and delivery partners welcome.