Other

 
AWS CloudTrail Export
Logs
CloudTrail
Data Breach
AWS CloudTrail events exported for the period 20-02-2025 to 27-02-2025 (breach window for TSR-INC-2025-031). Principals and account identifiers have been redacted. Events…
 
Application Server Logs
Application Server
Logs
Data Breach
These logs include suspicious activities on the application server.
 
Business Impact Analysis
Business Continuity
Risk Management

The Business Impact Analysis (BIA) identifies Tessera’s critical services and their recovery time and recovery point objectives (RTO/RPO) to inform continuity and…
 
Cloud-Native Architecture Diagram
IT Infrastructure
Network Management
Security Architecture

Cloud-native reference architecture for the Tessera multi-tenant SaaS platform on AWS, showing the VPC topology, multi-tenant application and data tiers, encryption…
 
Database Access Logs
Database
Logs
Data Breach
These logs capture the sequence of database queries and export actions taken by the attacker.
 
Document Register
Document Management
Compliance

The Tessera document register is the controlled catalogue of policies, procedures and supporting documents — their current status, owner and version — maintained to support…
 
Employee Handbook and Policy Quick Reference
Human Resources
Training
Security Awareness

An abridged version of Tessera’s security policy that all workforce members are required to be familiar with and comply with, framed to the Privacy Act 1988 (Cth) and…
 
Endpoint Detection and Response (EDR) Logs
Endpoint Detection and Response (EDR)
Logs
Data Breach
These logs indicate endpoint-level alerts and actions.
 
Entity Relationship Diagram
Data
IT Management
Software

A simplified conceptual entity-relationship diagram for the Tessera multi-tenant platform, showing the core operational entities and their relationships.
 
Executive summary for the Board — TSR-INC-2025-031
Incident Response
Governance
Compliance

Executive summary for the Board on incident TSR-INC-2025-031, the late-February 2025 breach in which a long-lived AWS access key exposed through a misconfigured public…
 
Failover Runbook
Business Continuity
Runbooks
Cloud Operations

Step-by-step runbook for failing over the Tessera multi-tenant SaaS platform from the primary AWS region (ap-southeast-2, Sydney) to the standby region (ap-southeast-1…
 
Financial Forecast (baseline)
Financial

Baseline financial projection for Tessera, showing projected revenue, expenses and net income across the period. Provided as a planning artefact; the figures are a baseline…
 
Firewall Logs
Firewall
Logs
Data Breach
These logs show external connections and potential unauthorised access attempts.
 
IAM Credential Revocation Log
Logs
IAM
Access Control
IAM credential last-used and access-key last-rotated data extracted from AWS IAM (get-credential-report / get-access-key-last-used) as part of the access-revocation test for…
 
Incident Report TSR-INC-2025-031
Incident Response
Security
Compliance

Incident report for TSR-INC-2025-031, the February 2025 data breach in which a long-lived AWS access key — belonging to a contractor whose engagement had ended — was exposed…
 
Information Security Risk Register
Risk Management
Security
Compliance

The Tessera Information Security Risk Register records the principal information security risks, their rating, the controls in place, and the accountable owner. It feeds the…
 
Internal communication to the workforce — TSR-INC-2025-031
Incident Response
Internal Communications
Security

Internal note to the Tessera workforce on incident TSR-INC-2025-031, the late-February 2025 breach involving a long-lived AWS access key exposed through a misconfigured…
 
Key Definitions
Education
Communication
Compliance

Key definitions used across the Tessera information security and privacy documentation, framed to the Privacy Act 1988 (Cth), the Australian Privacy Principles, and ISO/IEC…
 
Legal and Compliance Obligations
Compliance
Risk Management
Data Protection

Tessera’s legal and compliance obligations, framed primarily to the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Notifiable Data Breaches scheme, with…
 
NIST SP 800-53 Cross-Reference
Compliance
Security Management
IT Management

Cross-reference from the NIST SP 800-53 control families to the Tessera policies and controls that give effect to them. Provided as a supplementary mapping; the primary…
 
Network Diagram (legacy)
IT Infrastructure
Network Management

Legacy network-logical diagram for the Tessera platform. Superseded by the cloud-native architecture diagram (DOC-NET-001) and retained for historical reference.
 
Notifiable Data Breaches (NDB) Playbook
Privacy
Incident Response
Regulatory Compliance

Operational playbook for assessing and responding to eligible data breaches under the Australian Notifiable Data Breaches (NDB) scheme (Privacy Act 1988 (Cth), Part IIIC).
 
Notification to affected individuals — TSR-INC-2025-031
Incident Response
Privacy
Compliance

Notification to individuals whose personal information was exposed in incident TSR-INC-2025-031. In late February 2025 Tessera detected anomalous egress from its…
 
Org Chart
Organisational Structure
Human Resources

Welcome to the organisational chart of Tessera, designed to elucidate the structural hierarchy and functional divisions within our company.
 
Preparing for ISO/IEC 27001:2022
Compliance
Security Management
Risk Assessment

How Tessera is preparing for ISO/IEC 27001:2022 certification-readiness — the CISO’s duties, the stage gates, and the evidence the certification body will test.
 
Risk Assessment Frameworks
Risk Management
Security
Compliance

Tessera’s risk assessment method, based on ISO/IEC 27005 and NIST SP 800-30, with the matrix and templates used to identify, analyse, evaluate and treat information security…
 
SSO / IdP Session Log
Logs
Identity
Access Control
Identity provider (Auth0) authentication and session events for selected identities, extracted for the access-revocation test (ISO/IEC 27001:2022 A.6.5) and the breach…
 
Security Incident Register
Incident Response
Security
Compliance

The Security Incident Register is a chronological log of recorded security incidents, their severity, status and owners.
 
Security Information and Event Management (SIEM) Alerts
Security Information and Event Management (SIEM)
Alerts
Logs
Data Breach
These logs detail alerts triggered by the SIEM system.
 
Security Posture Summary
IT Management
Security
Compliance

A plain-language summary of Tessera’s security posture following the TSR-INC-2025-031 breach — where the platform is strong, where it was weak, and what the remediation…
 
Security Programme Overview
Security Management
Compliance
Operational Security

Overview of the Tessera information security programme — its scope, the principles it is built on, and the control domains it covers, aligned to ISO/IEC 27001:2022 and the…
 
Statement of Applicability (SoA)
Compliance
Security
ISO/IEC 27001

Tessera’s Statement of Applicability (SoA) identifies the ISO/IEC 27001:2022 Annex A controls applicable to the ISMS, their implementation status, and the justification for…
 
Tessera Datasets Overview
Financial
data

An overview of the Tessera teaching datasets. Each dataset captures a different aspect of the business and is designed to surface meaningful patterns when analysed.
 
Tessera Information Security Management System
Security Management
Compliance
Risk Management

The Tessera Information Security Management System (ISMS) — its scope, context, leadership, and the ISO/IEC 27001:2022 framework that governs how information security is…
 
Training Register
Human Resources
Training
Skills Development

The Tessera Training Register records the security, privacy and role-based training completed by the workforce, supporting control A.6.3 of ISO/IEC 27001:2022.
 
VPN Access Logs
VPN
Logs
Data Breach
These logs show the initial access via the VPN using compromised credentials.
No matching items