BlackGlass FII inserts an active inspection, vaulting and blocking layer between high-risk workflows and exposed data paths. Grounded in Asymmetric Custody: the capability to seal data is functionally separated from the capability to unseal it. Your data is decryptable by the data owner — not by the cloud provider, supplier, third party, adviser or advisory platform. BlackGlass FII is an owner-controlled custody and fraud-intent inspection architecture for high-risk data workflows. It helps organisations evaluate who can seal data, who can unseal it, which controls are evidenced, and whether long-retention records are ready for post-quantum custody expectations. Evaluated across eight dimensions: custody degree, coercion resistance, forward secrecy, quantum resistance, network isolation, key ceremony assurance, data classification tier, and regulatory alignment. Mapped to PSPF, ISM, PCI-DSS v4.0.1, APRA CPS 234, EO 13526, and GSCP. BlackGlass Theory — doi:10.5281/zenodo.20388612
Select your sector. Each view is calibrated for three entry points: risk and threat (CISO), architecture and implementation (Technical), and governance and regulatory accountability (Director). Seeing all three is intentional — it equips each reader to make the internal case to the other two.
See your framework mapped at control level in the compliance block below, or request a BlackGlass FII Custody & Quantum-Readiness Evaluation.
Request evaluation →Select a threat scenario to see which evaluation dimensions are activated, what happens without FII in place, and how the Fraud-Intent Inspector responds.
Conventional encrypted storage preserves a single structural weakness: the system that holds your encrypted data also holds, or can access, the capability to decrypt it. Increasing key length does not resolve this. Changing the encryption algorithm does not resolve this. Only separating the sealing capability from the unsealing capability resolves it. That is what Asymmetric Custody does. Select a custody event below to see the difference.
Five custody degrees. D1 and D2 represent the status quo — the architecture Block 3 tested to destruction. D3 through D5 are the BlackGlass FII deployment range. Select the degree that reflects your environment and see what it requires architecturally, which obligations it satisfies, and the characteristic signals that place you there.
Every claim below is made at control level, not framework level. The mechanism is named. The evidence BlackGlass FII produces for each control is named. Your auditor, regulator, or board is the intended reader of this section. Select your framework above. Your location has been used to pre-select the most relevant one.
In May 2026, the US Department of Commerce backed nine quantum computing firms through a US$2 billion equity investment programme. One of them is Australia's Diraq, whose silicon-CMOS approach targets millions of qubits by 2031 and tens of millions by 2033. GlobalFoundries is named as the manufacturing partner for CMOS-based scaling, meaning the production pathway uses existing semiconductor infrastructure — not bespoke quantum facilities. That matters for BlackGlass FII because long-retention records sealed today may still need protection when quantum-scale capability matures. The architectural response is not to panic. It is to stop treating classical key management as the final custody boundary.
The BlackGlass FII Technical Brief is a 6 to 10 page evaluation document covering the custody problem, the FII architecture, the five-degree custody model, the eight evaluation dimensions, the evidence artefacts the evaluation produces, and the quantum-readiness rationale grounded in current NIST and industrial signals. It is the document your CISO, architect, or risk committee can read before committing to an evaluation.
What the brief coversThe registration mechanism for this document is itself a scaled-down implementation of BlackGlass FII. Your submitted information is encrypted at rest. Decryption capability is not held by the delivery platform. The download link is a timed, single-use token that expires and cannot be reused or forwarded. You experience the custody architecture before you read about it.
Information submitted is used solely to deliver this document and for GABEY Consulting to follow up if you explicitly request it. It is not sold, shared, or provided to any third party under any circumstances.
Submitted registration information is encrypted at rest. Decryption capability is not held by the delivery platform. The custody architecture applied to your registration data is the same principle BlackGlass FII applies to client data workflows.
The download link is a timed, single-use token valid for 10 minutes. It cannot be reused, forwarded, or accessed without the original token. Accessing the endpoint without a valid token produces no readable output.
Registration data is retained only for the period necessary to deliver the document and manage any follow-up you explicitly request. No marketing lists. No profiling. No third-party transfer.
Privacy notice: Personal information collected through this registration is handled in accordance with the Privacy Act 1988 (AU) and Australian Privacy Principle 11. GABEY Consulting Pty Ltd (ACN 121 511 055) is the data controller for all registration submissions. Information is not transferred outside Australia except where required to deliver the requested document. Submitted information is encrypted at rest; decryption capability is not held by any third-party platform or delivery service. The document download mechanism is a timed, single-use token implementation. Accessing the download endpoint without a valid token produces no readable content.
Copyright notice: The BlackGlass FII Technical Brief is protected by copyright. © 2026 GABEY Consulting Pty Ltd (ACN 121 511 055). All rights reserved. Published under the NOMATEQ brand. DotShield™ is a registered trade mark of GABEY Consulting Pty Ltd (TM 2602060). The brief is provided for evaluation and information purposes only and must not be copied, redistributed, republished, or modified except with written permission or where permitted by law.
Request a BlackGlass FII Custody & Quantum-Readiness Evaluation and receive the artefacts your board, auditor, regulator, and architecture team can actually review. Evaluated across eight dimensions. Mapped to your framework at control level.
◆ Five evaluation deliverables · Eight custody dimensions · Control-level evidenceCustody degree candidates are identified, regulated data classes are reviewed, and the relevant framework obligations are confirmed against your operating environment.
BlackGlass FII is assessed across the eight custody dimensions. Control-level mappings are completed for your primary framework. The Key Ceremony Assurance Score (CAS) is produced.
Named artefacts are delivered. Board summary is prepared. Regulator and auditor briefing material is made ready. Quantum-readiness assessment is included for all engagements.
No generic enquiry is required. This request is for the evaluation package described above.
Complete the evaluation request on the GABEY Consulting submission page. We will confirm scope, outline the five-artefact delivery package, and schedule the engagement. The form takes less than two minutes to complete.
Complete evaluation request → Opens gabey.com.au — GABEY Consulting Pty Ltd secure submission pageReferences to APRA CPS 234, PSPF, ISM, PCI-DSS v4.0.1, GDPR, DORA, UK GDPR, NCSC CAF, SOC 2, CCPA, MAS TRM 2021, ISO/IEC 27001:2022, Privacy Act 1988 (AU), and NIST FIPS 203 are for analytical mapping and informational purposes only. All framework names, standard numbers, and regulatory references are the property of their respective owners and standards bodies.
GABEY Consulting Pty Ltd (ACN 121 511 055) and DotShield™ are not affiliated with, endorsed by, accredited by, or certified under any of the named regulatory frameworks, standards bodies, or government agencies, including APRA, the Australian Signals Directorate, NIST, the Monetary Authority of Singapore, or the PCI Security Standards Council.
Control-level mappings represent analytical assertions made by GABEY Consulting Pty Ltd. They map to, support, and evidence obligations under the named frameworks. They do not constitute regulatory certification, legal advice, or compliance assurance. Organisations should obtain independent legal and compliance advice in relation to their specific regulatory obligations.
The Key Ceremony Assurance Score (CAS) and custody degree assessment are proprietary evaluation instruments of GABEY Consulting Pty Ltd. They are not certified instruments under any named framework or standards body.
References to Diraq and the ACS Information Age article (May 2026) are factual citations from publicly available sources. GABEY Consulting Pty Ltd is not affiliated with Diraq, the Australian Computer Society, or the US Department of Commerce. The quantum timeline analysis represents an analytical assertion grounded in publicly reported information and NIST PQC standardisation guidance.
Completion of a BlackGlass FII Custody & Quantum-Readiness Evaluation does not constitute regulatory approval, certification, or legal compliance assurance under any named framework. © 2026 GABEY Consulting Pty Ltd. All rights reserved.
CISOs, CROs, compliance managers, legal counsel, and architecture teams who need evidence-grade custody documentation for a board, regulator, or auditor. Engagement is available to Australian organisations and international organisations with Australian regulatory obligations.
The evaluation is grounded in the BlackGlass Theory framework published at doi:10.5281/zenodo.20388612 and the Conditional Consequence Mapping Methodology (CCMM) published at SSRN Abstract ID 6364078 and Zenodo doi:10.5281/zenodo.19382186. Both are independently citable and verifiable.
This is not a certification service. Completion of a BlackGlass FII Custody Evaluation does not constitute regulatory approval, certification, or legal compliance assurance under any named framework. Mappings are analytical assertions made at control level and evidenced in the evaluation output.
© 2026 GABEY Consulting Pty Ltd (ACN 121 511 055). All rights reserved. DotShield™ is a registered trade mark of GABEY Consulting Pty Ltd (TM 2602060). BlackGlass FII is a DotShield™ product. Methodology: doi:10.5281/zenodo.20388612. CCMM: doi:10.5281/zenodo.19382186.