About Aegentra
Aegentra is an Australian cybersecurity, governance and professional-training company. Govern implements and independently evaluates management systems under separate scopes; Harden improves Microsoft 365 security; Aegentra Academy delivers official PECB training; and Aegentra Labs develops separate software and exam-preparation products.
Founder
Director and Principal Consultant
ISO 27001 Lead Implementer · PECB certificate no. 9303577-2026-05 · 10 years in cybersecurity
Harry founded Aegentra to close a gap he kept meeting from both sides of an audit: organisations were buying compliance documentation and discovering, at Stage 2, that nobody had built the system underneath it.
He leads the Govern practice—ISO 27001 and ISO 42001 implementation and internal audit, SOC 2 readiness, and SOX ITGC. As principal consultant, he is accountable for engagement scoping and delivery oversight. The proposal confirms the consultants assigned to the work and their responsibilities.
Across 10 years in cybersecurity engineering and consulting, Harry has implemented ISO 27001 information security management systems and ISO 42001 artificial intelligence management systems end to end for medium and large organisations. His government work includes ISMS and Essential Eight implementation, with experience applying OAIC and OVIC guidance in Australian privacy and information-security contexts.
He writes and reviews Aegentra’s own technical guides, supplementary learning resources and certification guidance published on this site. These Aegentra-authored resources are separate from official PECB course materials. Course and examination descriptions should be read alongside the applicable PECB candidate requirements.
His credential is independently verifiable: use Harry Sidhu and certificate number 9303577-2026-05 in PECB’s certificate verification tool. That is a deliberate choice — a name on a page proves nothing, and a number that can be checked is the only version worth publishing.
Connect on LinkedInDelivery capability
Aegentra’s delivery team combines senior experience across IT audit, cybersecurity governance, enterprise risk, internal controls and management systems.
Qualifications, professional credentials and formal training held across Aegentra’s delivery team.
Further training and audit qualifications across the team include ISO/IEC 42001 Lead Implementer training, ASD ISM General and Technical audit codes, ISO/IEC 27017 and ISO/IEC 27018 audit codes, and ISO 9001 and ISO 19011 audit qualifications.
Credentials are held across the delivery team and matched to assigned roles. The proposal identifies the consultants, responsibilities and relevant qualification evidence before work begins.
Aegentra’s delivery team brings more than two decades of professional experience across IT audit, cybersecurity governance, enterprise risk and internal controls. Across their professional careers, team members have delivered 2,000+ hours of ISO, ASD ISM and GRC audit work across 70+ organisations in government, finance, healthcare, defence, manufacturing, technology, not-for-profit and logistics.
Read more about our teamWhat sets us apart
A consultancy may stop at a gap report, while a platform can collect evidence without designing the operating system around it. Aegentra combines scoped advice with hands-on implementation and leaves the organisation with named owners and reproducible evidence.
Aegentra distinguishes implementation, Clause 9.2 internal audit and certification. Internal-audit work is accepted only after objectivity, impartiality and prior involvement are checked; an independent accredited certification body makes the certification decision.
Controls and records need to keep pace with changes to your people, suppliers and systems. Where included in the agreed scope, Aeges helps collect and organise supported Microsoft 365 configuration evidence. That evidence sits alongside policies, interviews, operating records and management review; a tenant snapshot alone does not establish ISO 27001 conformity.
Depth of practice
Four practices, with every public claim tied to a defined scope or source.
Aegentra is a registered business name of HansDivisionGroup Pty Ltd, an Australian private company with an active ABN and GST registration since 24 June 2024. Aegentra is an Australian cybersecurity, governance and professional-training business with teams based in Melbourne and Sydney. Our consulting practice supports organisations across Australia, with New Zealand and wider Asia Pacific engagements available where agreed. Each proposal identifies the delivery lead and the people assigned to the work.
Scoped work includes ISO 27001, ISO 42001, SOC 2, SOX ITGC and Microsoft 365 security.
Aegentra publishes selected engagement summaries that explain the agreed scope, approach, evidence reviewed and reported findings. Client identities and confidential working papers are not disclosed without permission. Illustrative case studies are labelled separately and do not represent completed client engagements. See the specific ISO 27001 Clause 9.2 internal audit reference.
Aegentra’s method is built around auditable evidence — requirements, risks, control owners, operating records and findings that can be traced — and Australian context, where they implemented ISO 27001 and the Essential Eight under real scrutiny rather than as a commercial exercise.
That matters for one practical reason. Someone who has sat on the auditor’s side of the table knows which evidence survives a Stage 2 audit and which collapses under a single follow-up question. It is the difference between a system built to pass and a system built to hold.
Independent audit discipline
Audit criteria, sampling, working papers, findings and conflict checks kept distinct from the implementation scope.
Government and regulated sectors
ISO 27001 and Essential Eight implementation where the scrutiny is statutory rather than commercial.
Microsoft 365 and Azure security engineering
Entra ID, Defender, Purview and Intune configured as controls that produce evidence, not as a licence checklist.
Enterprise and large-scale environments
Management systems that hold across thousands of identities and multiple jurisdictions, not just a single-office scope.
Audit and implementation across Asia Pacific
Both sides of the engagement — building systems and assessing them — across the region Aegentra serves.
Services
Scoped management-system implementation, readiness and assurance—connecting business risks, accountable owners, controls and operating evidence.
All four sit together on the solutions overview. Alongside them, Aegentra Academy is an official PECB authorised training partner offering a catalogue of ISO, governance and cybersecurity certification courses — for organisations that want their own people credentialed rather than the work outsourced.
Company updates
18 September 2026
The partnership combines Vanta’s compliance platform with Aegentra’s implementation support. Australian organisations can enquire about partner pricing and practical help with audit readiness.
Read announcement7 September 2026
Aegentra joined the Microsoft AI Cloud Partner Program in June 2026, supporting its focus on Microsoft 365 security and IT services in Australia.
Read announcement7 September 2026
Aegentra's CompTIA membership began in July 2026. The company is planning additional learning options, with course details to be published when available.
Read announcement7 September 2026
Aegentra's Pax8 partnership began in August 2026, connecting cloud marketplace access with its focus on security and IT support for Australian businesses.
Read announcement7 September 2026
Aegentra's Drata partnership began in September 2026, connecting its governance practice with a platform for compliance workflows and evidence management.
Read announcement11 May 2026
Aegentra has signed as an official PECB authorised training partner and launched Aegentra Academy with published online self-paced pathways across ISO 27001, ISO 42001 (AI), ISO 27701 (privacy), ISO 31000 and SOC 2. Instructor-led delivery for organisations is scoped on request and published only when confirmed.
Read announcement10 May 2026
Aegentra has renamed its in-tenant risk engine from "Aegentra Core" to Aeges, separating the product from the parent brand and signalling its own roadmap for Microsoft 365 security telemetry.
Read announcement10 April 2026
Aegentra has released its Microsoft 365 risk engine, surfacing identity, configuration, and exposure issues across a tenant — with findings delivered through the Aegentra Dashboard.
Read announcementHow we work
A management system has to operate, not just exist as documentation. Aegentra works inside the agreed environment, configures the selected controls and organises evidence that can be reproduced and reviewed.
Every engagement begins with a written scope, a named lead, identified delivery roles, responsibilities and exclusions. Additional roles are disclosed in the scope instead of being implied by a generic team claim.
Every claim we make about your posture is traceable to a configuration state, a log, or a record. That is the standard an auditor applies, and applying it to ourselves first is the only way an audit stops being an event to survive.
The Essential Eight, the Privacy Act and the APPs, APRA CPS 234 and CPS 230, and JAS-ANZ accreditation are the ground our clients operate on. We map international standards onto that ground rather than the reverse.
Careers
Aegentra is deliberately senior-led. The named engagement lead, delivery responsibilities and any supporting roles are confirmed in the written scope before work begins. The delivery model explains how roles, competence evidence and independence checks are disclosed before an engagement is accepted.
Regional websites
Aegentra serves organisations and learners in Australia, New Zealand and the United Kingdom through regional websites operated by HANSDIVISIONGROUP PTY LTD, the Australian company behind Aegentra. These are regional websites of the same business, not separate regional companies.
Choose the regional site for its services, course options, contact details and purchase terms. Availability, delivery arrangements and the scope of work are confirmed before booking. For support outside these markets, ask us to confirm availability first.
Aegentra Labs is our separate exam-preparation and practice platform. Its independently authored preparation resources are distinct from official PECB course materials and examinations. A course includes Labs access only where the selected bundle expressly says so.
Company
Aegentra operates as a service-area business without a public office address.Teams in Melbourne and Sydney. Delivered across all Australian states and territories, remotely or onsite by arrangement. New Zealand and Asia Pacific by arrangement. For Academy enrolments and consolidated invoicing, reach the Academy team at Academy@aegentra.com.au. For local business projects, see our ISO 27001 services in Melbourne and ISO 27001 services in Sydney.
Scoping conversations are with the principal consultant, not a salesperson.