About the firm
Tier-one experience, without the layers.
A boutique practice built so that the person who assesses your exposure is the person who has run resilience, security and risk inside institutions of that size.
The principal
One name on every opinion.
Ali Hussain
Founder & Principal, 4T Advisory
- Certified Information Security Manager (CISM)
- Certified AI Risk Manager
- Business Continuity Management (ISO 22301)
- ISO 27001 Lead Implementer (course)
- Certified Ethical Hacker (CEH)
- Certified Computer Hacking Forensic Investigator
- APRA CPS 232 Business Continuity Management (legacy certification; CPS 232 was revoked on 1 July 2025)
BSc Science (sandwich), Double Computing
Oxford Brookes University, Oxford, UK
Ali has spent over 27 years in information technology, including 25 years in senior roles within global investment banks, across Treasury and Global Markets front-office technology, trading platforms, market data and stock exchange connectivity, audit, information security, business continuity, enterprise resilience, crisis management, vendor management and ICT operations.
His career has spanned major financial centres including London, Frankfurt, Tokyo, Singapore, Hong Kong, Riyadh, Qatar, Dubai, Karachi and Australia, in complex, regulated and high-availability environments.
Most recently, from March to August 2026, he was Governance and Frameworks Manager, Business Resilience at the Australian Securities Exchange. He authored ASX's first Tier 1 Operational Resilience Framework and the policy and standard suite beneath it, holding design authority over how ASX identified critical financial market services, set and defended impact tolerances, mapped dependencies and tested resilience under severe but plausible disruption. The work translated ASIC and RBA supervisory expectations, benchmarked against the intent of APRA CPS 230 and the Security of Critical Infrastructure Act 2018, into proportionate requirements for a financial market infrastructure environment.
He is currently a Non-Executive Director on the Finance, Audit and Risk Committee of ADEC (Action on Disability within Ethnic Communities), providing independent challenge on enterprise risk, ICT and cyber risk, Essential Eight maturity and operational resilience.
Earlier roles include Head of Enterprise Resilience Management at Slater and Gordon Lawyers, Head of ICT and Business Resilience Management at the ANZ Worldline joint venture, and SVP and VP roles leading Technology, Business Resilience and Information Security for Treasury and Global Markets at Citi (Samba) in Riyadh, with earlier positions at ABN AMRO, Merrill Lynch, Barclays Capital, UBS Warburg and Deutsche Bank.
Career history is listed as professional background. It does not imply that any past employer is a client of, or endorses, 4T Advisory.
The name
Four responses to risk.
4T draws on the risk-response tradition of the four Ts. It is the discipline behind every engagement: name the risk, then choose the response deliberately rather than by default.
Accept it, knowingly, within appetite.
Reduce it with controls designed to work in practice.
Share or shift it where that is sound.
Stop the activity when the risk is not worth it.