Risk Management & Reporting Archives

Staff scarcity will impact your cyber security resilience

The shortage of skilled personnel in cyber security will continue to challenge organisations for some time to come. In Australia, recent figures confirm a deficit of more than 3000 specialists by 2026. In the UK, a recent study by Russell Reynolds Associates,...

Governments are increasingly assertive about cyber security

We continue to see the publication of guidance, advice and regulations by various international cyber security agencies. These have been for specific sectors, suppliers to government and for businesses more generally. What varies, and it seems to depend...

Attack Surface Management

Sometimes new terms enter the lexicon that represent a genuinely new technique or approach to a problem; other times those similar sounding techniques can turn out to be solving a different problem. This linguistic dance of marketers and analysts ends...

Joint advisories are becoming more common – and it’s not a bad thing

Last week there was a joint advisory issued by multiple National Security Agencies in response to the ongoing rise in cyber-attacks globally. The document: referenced the top 15 vulnerabilities routinely exploited by malicious actors in 2021; highlighted...

APRA highlights the need for improved cyber resilience oversight

In late November 2021 an APRA Insight report noted that it expected boards to have the same level of confidence and capability in reviewing IT cyber security issues as any other business issue. It also noted that during the preceding period, described...

The changing nature of cyber security insurance

Cyber security insurance used to be like any other risk management tool. Manage it by building internal expertise, outsource it to a specialist provider; or lay it off to an underwriter or insurer. Cyber insurance has been seen as an effective risk management...

Penknives and Ransomware Risk Assessments

Keen campers, scouts and even the Swiss Army know – that a good penknife is indispensable. This simple device has mitigated many a disaster at one point in time or another. Whether it’s to cut through a bit of string, tighten a screw or simply...

Heighten your defences: Organisations should urgently adopt an enhanced cyber posture

In light of recent world events, many governments are strongly advising organisations to monitor for cyber-threats and take steps to enhance their cyber security posture. In Australia, this advice has come in the form of the latest ACSC advisory dated...

Another advisory to remind us about ransomware readiness

The ransomware scourge of 2021 hasn’t abated in 2022. At a state level, there are numerous reports of renewed attacks against government systems in Ukraine. In business, memories of JBS Foods were sparked when UK snack food producer KP found itself ...

Operationalising IT security reviews

Commissioning or undertaking a security review is a familiar process for most security managers, internal and external auditors, CISOs and risk owners. The growing responsibilities of directors for the effective management of IT risk almost guarantees...