About Outplat

Built by practitioners.
Designed to scale.

Outplat is Australia's specialist CMaaS (Compliance Management as a Service) practice — what the industry also calls CaaS, Compliance as a Service. Purpose-built for WA mining contractors, defence supply chain companies, independent schools, and Australian product companies with live regulatory obligations. Our leadership team spans GRC and regulatory compliance, technical security engineering, and AI enablement — based in Perth (Head Office) and Sydney, backed by a specialist associate network. The rigour of a tier-1 advisory practice, on a model that actually works for the organisations we serve.

The Practice

A compliance practice built on
standards that don't scale down

Outplat was founded because the organisations that most need specialist compliance expertise are the ones least able to access it at the rates big firms charge. We exist to close that gap — with genuine practitioner depth across both regulatory and technical security domains.

01
Practitioner-led delivery
Every Outplat engagement is led by a senior practitioner with direct, hands-on experience in the relevant sector and framework. Not supervised by one. Not reviewed by one. Led by one — from scoping through to ongoing management.
02
Regulatory and technical depth
Our our leadership team cover the full spectrum — from Australian regulatory obligations and compliance management, through cloud security engineering and AI engineering, to product strategy and AI-enabled transformation. Most GRC firms advise. We can also build and transform.
03
Built to scale
Outplat is structured to grow. Our leadership team sets the standard every engagement is held to. As scope and complexity grow, we bring in specialist associates across technical security, legal, and audit disciplines — sector-matched, not whoever is available. Headcount is not the constraint. Quality is.
Leadership Team

Our leadership team.
The standard every engagement is held to.

Outplat engagements are led by our team — not handed to a junior team. You deal with the same people from scoping through to ongoing delivery.

Simi Das
Simi Das
Founder & Principal GRC Consultant
Nearly two decades as the person inside WA organisations responsible for making compliance work — not advising on it from the outside. Utility-scale critical infrastructure. State-level health systems. ASX-listed resources companies. Defence-adjacent programs.
Focus areas
GRC & Compliance Management Essential Eight DISP & Defence Privacy Act / APP ISO 27001 SOCI / CIRMP AI Governance — ISO 42001
Credentials
CISSP — Certified Information Systems Security Professional ISO 27001 Lead Auditor Essential Eight ML1–ML3 DISP — application and ongoing compliance SOCI Act / CIRMP obligations Privacy Act / APP — reformed obligations ISO 42001 AI Governance 19 years GRC and compliance leadership
Amit Kulkarni
Amit Kulkarni
Principal Consultant — Security & AI Engineering
20+ years of technology experience across banking, mining, healthcare, microelectronics, and embedded software. Clients include Qualcomm, IBM, Bankwest, BHP, Telstra Health, and Bunnings. Amit leads Outplat's technical security delivery — penetration testing, application security, cloud security architecture, threat intelligence platform engineering, DevSecOps pipeline automation, and AI engineering. Where engagements require hands-on technical assessment alongside regulatory compliance, Amit bridges both.
Focus areas
Cloud Security Architecture Application Security AI Engineering & Assessment DevSecOps Penetration Testing Threat Intelligence Vulnerability Management
Certifications & education
AWS Certified Security Specialist AWS Solutions Architect Associate CrowdStrike Certified Cloud Specialist AI Engineering Application Security — SAST, DAST, SCA, Penetration Testing DevSecOps — CI/CD pipeline security automation Cloud Security — CSPM, CNAPP, Splunk SOAR OWASP Open Source Contributor
Pradyush Das
Pradyush Das
Principal Consultant — AI Enablement & Transformation
Sydney-based product and technology strategist with deep experience in AI enablement, CRM transformation, and enterprise systems. Brings a design-thinking approach to compliance — translating complex obligations into practical, product-led outcomes.
Focus areas
AI Enablement & Strategy CRM & Enterprise Systems IT Service Management — ITIL Digital Transformation Agile Delivery Technology Governance
Certifications & credentials
Salesforce Certified — Sales Cloud Salesforce Certified — Service Cloud Salesforce Certified — Administrator Microsoft Certified — Dynamics 365 Customisation & Configuration ITIL Foundation — UK Government certified IDEO Design Thinking Foundation
How We Scale

Practitioner standards.
Practice capacity.

Outplat is built to scale with the clients it serves — from a single scoped engagement through to enterprise-wide compliance programs spanning multiple frameworks, states, and regulatory obligations. Our leadership team sets the standard. As scope and complexity grow, we draw on a specialist associate network across penetration testing, legal and privacy counsel, IRAP assessment, forensic audit, and OT security — sector-matched, held to the same delivery standard, never whoever is available.

Leadership
team
GRC, security engineering, AI engineering, and product transformation — supported by specialist associate network
19yr
Combined GRC and compliance leadership experience
∞
Associate and partner network — penetration testing, legal counsel, IRAP, forensic audit
0
Offshore handoffs — all work delivered by Australian-based practitioners
No offshore handoffs
All work is delivered by Australian-based practitioners. Our team is based in Perth (Head Office) and Sydney — covering both coasts with no offshore handoffs.
Consistent standards
Every person who touches an Outplat engagement — principals or associate — works to the same methodology and quality bar.
Sector-matched expertise
Associates are selected for segment fit, not availability. The right expertise for your industry, every time.
Senior accountability at any scale
Whether the engagement is a single scoped assessment or an enterprise-wide compliance program, a named senior practitioner is accountable for outcomes. Not a project manager. Not an account coordinator. The person who knows the work.
Sector Depth

Four segments.
Deep expertise in each.

We don't measure ourselves by headcount. We measure by depth of expertise in our four segments. Every person who works on an Outplat engagement is selected because they know this work from the inside.

Resources, Energy & Critical Infrastructure
Mining, LNG, offshore, pipeline — supply chain compliance under real operational pressure. Essential Eight, AESCSF, and SOCI Act obligations.
Defence Supply Chain
DISP application preparation, Essential Eight ML2 implementation, PSPF controls, and ongoing DISP obligations management. AUKUS supply chain readiness for WA and national defence contractors. Our team has direct experience managing DISP compliance for SME defence suppliers — not advising on it from the outside.
Anglican & Independent Schools
Privacy Act obligations in sectors handling the most sensitive personal data. Diocese networks across WA, VIC, and NSW.
Australian Product Companies
ISO 27001, SOC 2, and Privacy Act for SaaS and fintech companies with enterprise deals on the line. AI governance for product teams building with AI.
Why This Model

The problem we
set out to solve

A WA mining contractor with a 30-day Essential Eight deadline doesn't need a national firm with a Sydney partner and a junior delivery team. They need practitioners who have done this before, who understand their environment, and who will still be managing it next month.

Specialists, not generalists
Four segments. Deep expertise in each. Every client benefits from pattern recognition across many similar organisations in their sector.
Fixed price, always
One monthly fee. No timesheets, no scope creep invoices, no surprises at end of month. Your board approves one number.
Permanently audit-ready
We manage controls and evidence continuously — not just when an audit is scheduled. Questionnaires arrive without warning. We're ready when they do.
Australian-based, nationally delivered
Our team is based in Perth (Head Office) and Sydney. We understand WA mining supply chains, AUKUS defence opportunities, and east coast enterprise markets — no offshore handoffs, ever.
Beyond the Work

Technology as a
pathway for young people

A career in cybersecurity carries an obligation to bring others into the field. Outplat is committed to supporting initiatives that open genuine pathways in technology for young people — particularly those without the networks or resources that make entry into this industry easier for some than others.

We direct a portion of our work toward education access, mentorship, and industry exposure for young people who could build careers in technology and cybersecurity, but haven't yet had a reason to believe that's possible for them.

If you run a program we should know about, or if you're looking for an industry partner — we'd like to hear from you.

Work With Us

Ready to talk about
your obligations?

A 30-minute discovery call costs nothing. We'll confirm which frameworks apply, what your compliance gaps look like, and what a fixed monthly engagement would look like for your organisation.

Book a free discovery call See our services