Our Work
PPA's work sits across four interconnected practice areas, with sector-specific applications that translate those capabilities into the particular regulatory context, threat environment, and reform pressures a given industry faces. The practice areas can be engaged separately, but they're designed to work together — because the organisations that protect people most effectively are the ones where strategy, risk awareness, accountability systems, and leadership capability are all aligned and reinforcing each other.
Regulatory Strategy and Governance
Organisations working in complex, high-accountability environments are rarely short of regulatory obligations. What they often lack is a clear-eyed understanding of what those obligations actually require in practice, where the regulatory environment is heading, and how to position themselves ahead of change rather than scrambling to respond to it.
PPA works with boards, executives, and senior leadership teams on the strategic dimensions of regulatory compliance and governance — not the mechanics of meeting minimum requirements, but the harder questions about how an organisation understands its obligations, makes decisions under uncertainty, and maintains the trust of the regulators, stakeholders, and communities it is accountable to.
This includes advice on regulatory positioning and strategy, governance design, the development and review of regulatory operating models, and support for organisations navigating significant reform environments or enforcement exposure. It draws directly on more than a decade of experience designing and leading regulatory functions at senior executive level, including the development of integrated operating models where compliance activity, investigations, supervision, and strategic communications work as a coherent system rather than a collection of independent functions.
Safeguarding and Digital Risk
The risks facing organisations with a duty of care to vulnerable people are not static. The threat environment shifts, offender methods evolve, and the gap between what a safeguarding framework says on paper and what it delivers in practice can widen without anyone noticing — until something goes wrong.
PPA works with organisations to assess and strengthen their exposure across the full spectrum of safeguarding and digital risk. That includes child safeguarding vulnerabilities in institutional settings, online harms and digital exploitation risks, technology-facilitated abuse, and the reputational and legal exposure that follows when safeguarding systems are found to have failed.
The work draws on direct operational experience in child protection, online safety regulation, and exploitation prevention — including a decade leading regulatory and investigative functions at the eSafety Commissioner and extensive engagement with law enforcement, international child protection bodies, and technology platforms. That background means PPA approaches safeguarding not as a compliance exercise but as a systems problem: assessing whether the frameworks, cultures, and practices in place would actually detect and disrupt harm, not just satisfy an audit.
Specific services in this area include safeguarding framework reviews, assessment of digital and online risk exposure, child safeguarding training for leadership and operational staff, and strategic advice on how organisations can respond to emerging threats and evolving regulatory expectations.
Integrity Systems
An organisation's accountability mechanisms — its complaints processes, investigation procedures, escalation frameworks, and decision-review systems — are the infrastructure through which it detects problems, responds to them, and learns from them. When those mechanisms work well, they protect the organisation and the people it serves. When they don't, they create compounding risk: problems that go undetected, investigations that don't hold up to scrutiny, decisions that can't be defended, and cultures that learn the wrong lessons from their own experience.
PPA reviews, designs, and strengthens integrity systems across all of these dimensions. The approach is grounded in actual investigative practice rather than theoretical frameworks — assessing not just whether the right processes exist on paper, but whether they function as genuine accountability mechanisms in practice.
Work in this area typically includes review of completed investigations and complaints for evidentiary standards, procedural fairness, documentation quality, and the adequacy of outcomes and recommendations; assessment of escalation architecture and threshold frameworks, including whether sub-threshold concerns are being captured and whether they're informing systemic risk assessment; design or redesign of investigation and complaints procedures; and advice on how integrity functions can be structured to generate the intelligence that improves every other part of an organisation's protective system.
This work is sector-agnostic. The methodology applies wherever an organisation has a serious obligation to investigate concerns, manage complaints, and hold itself accountable — whether that's a regulator, a service provider, a peak body, or a large employer in a child-facing industry.
Executive Capability and Preparedness
The moments that test leadership most directly are rarely the ones that can be fully anticipated. A Senate Estimates hearing. A media inquiry following an incident. A parliamentary committee examining your organisation's performance. A crisis that requires clear communication under pressure and in public. These are the environments where preparation makes a measurable difference — and where the absence of it shows.
PPA works with executives, senior officials, and leadership teams to build genuine capability for high-stakes accountability environments, not surface-level media training or formulaic committee preparation. The work is grounded in direct experience of these environments from the inside — as a senior executive who has appeared before parliamentary committees, advised Ministers, and led organisations through significant public scrutiny.
Preparation covers the mechanics of the process, the strategy for managing difficult questions and adversarial engagement, the discipline of clear communication under pressure, and the judgement required to make good decisions in real time when the stakes are high. The goal is not a set of rehearsed answers but a confident, capable leader who understands the environment they're walking into and can perform at their best within it.
PPA's Senate Estimates coaching program is the most developed expression of this work.
Learn more about Senate Estimates coaching here.
Sector Focus: Early Childhood Education and Care
PPA develops deep sector-specific expertise in response to where reform pressure, regulatory change, and client need are most acute. The first sector application of PPA's core capabilities is early childhood education and care.
The ECEC sector is at a critical juncture. The Senate Education and Employment References Committee's March 2026 report into the quality and safety of Australia's early childhood education and care system delivered an unambiguous finding: the systems designed to protect children in care have not always stopped harm, and the status quo is no longer acceptable. Mandatory child safety training obligations take effect from August 2026. A National Educator Register is in development. Working With Children Check reforms are underway. And the committee's 23 recommendations create a multi-year implementation agenda that every provider will need to navigate.
Against that backdrop, the gap between regulatory compliance and genuine child protection has never been more visible — or more consequential. Services rated as Exceeding the National Quality Standard had serious offending occurring within them. Quality ratings improved while serious incidents rose. The committee named the problem directly: too many organisations are focused on procedural compliance rather than the outcomes that actually keep children safe.
PPA works with ECEC providers, peak bodies, and sector leaders across all four capability areas, translated into the specific regulatory and risk environment the sector faces:
Safeguarding framework reviews assess whether a provider's policies and procedures meet both the regulatory requirements and the primary purpose test — whether they would actually function as safeguards in the hands of the people expected to use them, not just satisfy an audit.
Investigations and complaints quality reviews examine whether a provider's internal accountability mechanisms are working — whether concerning behaviour is being identified, investigated rigorously, documented properly, and escalated appropriately.
Child safeguarding training builds practical understanding of how child sexual abuse and exploitation occurs in institutional settings, how offenders gain and exploit access through grooming of children and families, and what staff and leadership need to know and do to reduce opportunity and improve detection.
Recruitment framework reviews assess whether a provider's hiring processes function as a meaningful safeguard — examining job descriptions, application screening, panel formation, interview design, reference check practices, WWCC verification, probation management, and early warning frameworks.
If you work in the ECEC sector and are preparing for the August 2026 obligations, reviewing your safeguarding framework, or working through how to build genuine protective culture rather than procedural compliance, PPA would welcome a conversation.
Get in Touch
Every engagement begins with a conversation. If your organisation is working on a problem that sits within any of these areas — whether you know exactly what you need or you're still working it out — Primary Purpose is available to talk.