About Komatsu Australia Information Security.
The Information Security function exists to protect Komatsu Australia's systems, data, and people from cyber threats — and to provide the tools and guidance that let the business move quickly and confidently. We work alongside IT, Legal, Risk, and the wider Komatsu Group.
How we're organised
The Komatsu Australia Information Security team reports to the Chief Information Officer with a functional line to the Komatsu Group Chief Information Security Officer. We operate from Lidcombe NSW with embedded resources in Perth WA for mining customer technology.
The team includes capability across security operations, identity, vulnerability management, governance and risk, awareness, and incident response. We work with Komatsu Limited and Komatsu Group entities globally on cross-border incidents and joint initiatives.
What we focus on
Our day-to-day work spans security monitoring, incident response, identity and access management, vulnerability remediation, and policy guidance. We work closely with the IT Service Desk team and embedded technology functions across Komatsu Australia's business units.
Strategic priorities are set annually with the Komatsu Australia leadership team and reviewed at the Risk Committee.
Our operating principles
Help, don't block
Our default is to enable the business to operate securely, not to say no. When we do say no, we explain why and propose alternatives.
Communicate clearly
Every Komatsu employee can find what they need from us in plain English. No security jargon for the sake of it.
Practise what we publish
Our policies apply to us first. We use the same controls internally that we recommend to the business.
Measure and report
We publish operating metrics quarterly to leadership and annually to the Risk Committee. The numbers go up before the words do.
How to engage with the team
Report a suspected incident or phishing email: use the incident reporting form, email cybersecurity@komatsu-security.com, or call +61 2 9097 4700.
Ask a policy or advisory question: email the team and we'll route to the right person.
Need security input on a project? Reach out early — the earlier we're involved, the easier it is to keep your project on schedule.
Suspect account compromise? Call us. Don't use email if you can't trust your account.