Risk Management & Reporting Archives

Joint advisories are becoming more common – and it’s not a bad thing

Last week there was a joint advisory issued by multiple National Security Agencies in response to the ongoing rise in cyber-attacks globally. The document: referenced the top 15 vulnerabilities routinely exploited by malicious actors in 2021; highlighted...

APRA highlights the need for improved cyber resilience oversight

In late November 2021 an APRA Insight report noted that it expected boards to have the same level of confidence and capability in reviewing IT cyber security issues as any other business issue. It also noted that during the preceding period, described...

The changing nature of cyber security insurance

Cyber security insurance used to be like any other risk management tool. Manage it by building internal expertise, outsource it to a specialist provider; or lay it off to an underwriter or insurer. Cyber insurance has been seen as an effective risk management...

Penknives and Ransomware Risk Assessments

Keen campers, scouts and even the Swiss Army know – that a good penknife is indispensable. This simple device has mitigated many a disaster at one point in time or another. Whether it’s to cut through a bit of string, tighten a screw or simply...

Heighten your defences: Organisations should urgently adopt an enhanced cyber posture

In light of recent world events, many governments are strongly advising organisations to monitor for cyber-threats and take steps to enhance their cyber security posture. In Australia, this advice has come in the form of the latest ACSC advisory dated...

Another advisory to remind us about ransomware readiness

The ransomware scourge of 2021 hasn’t abated in 2022. At a state level, there are numerous reports of renewed attacks against government systems in Ukraine. In business, memories of JBS Foods were sparked when UK snack food producer KP found itself ...

Operationalising IT security reviews

Commissioning or undertaking a security review is a familiar process for most security managers, internal and external auditors, CISOs and risk owners. The growing responsibilities of directors for the effective management of IT risk almost guarantees...