Abe Dearmer

#Brisbane based #network. If you're attending the Defence Industry Networking #event this #Wednesday I'll see you there. I'm pumped to be back in a #growth and #strategy role at Ironside Resources. If your #business has a #capability gap, let's chat about how #ourADF #sailors, #soldiers and #aviators can provide a #solution. #veteranemployment #capability #resources #leadership #projectmanagement #skilledtrades

47

5 Comments

Throughout 2024, the Protegas Australia team has been supporting a range of organisations with the establishment and development of new intelligence capabilities. Some lessons we have picked up along the way: > While intelligence requirements and missions may vary, the principles of intelligence remain constant > Successful intelligence capabilities appropriately balance people, technologies and processes > Change management is essential for the establishment or uplift of intelligence capabilities > Implementation of intelligence capabilities within organisations takes time We have greatly valued the essential input from intelligence practitioners and decision makers alike as we continue to refine and improve our Intelligence Capability Model.

54

1 Comment

Some of the most interesting stories I’ve heard are talking to these folks for our podcast Tactics & Tech Podcast (TTP) Learn how to get involved with drones and tech!

3

The Australian Digital Defence Industry Matrix is live! With the Defence Strategy and budget released, now is the time for Defence Industry to be getting on with building the capability we need. ADDIM is going to supercharge that effort. #defence #defenceindustry #supplychain #sourcing #procurement #workforce #innovation #datainsights

21

1 Comment

Navigating the complexities of the Information Security Manual (#ISM) Software Development Guidelines can be challenging. That's why Sonatype has created a detailed guide to help Australian developers easily meet ISM software development guidelines. Learn how to: 🔹 Implement best practices for ISM compliance. 🔹 Enhance your security measures. 🔹 Protect your applications from potential threats. Read the full guide and ensure your development process is secure and compliant! https://bit.ly/4d89Uc4

7

Over the past few months I’ve been meeting and speaking with highly regarded specialists across the Australian security and defence sectors. All discussions end up focusing on the importance of having sovereign capabilities in the design and manufacturing of high-tech defence / security systems. Here’s a brief (not-in-the-tent) summary on the many detailed conversations had on this topic. Sovereign capability refers to a nation's capacity to independently develop and maintain essential capabilities across various sectors, including defense, technology, industry, and resources. It entails having the ability to meet crucial needs without relying heavily on external sources or being vulnerable to disruptions in global supply chains. For instance, in Defence, a country with sovereign capability can design, produce, and maintain its own military equipment and systems, reducing dependence on foreign suppliers. It involves the capability to innovate, research, and produce advanced technologies domestically, ensuring control over critical infrastructure and reducing reliance on foreign technology and manufacturing. Being sovereign is to have autonomy and resilience, enabling a nation to safeguard its interests and make decisions independently in an increasingly interconnected world. Let’s not stick our heads in the sand and hide away from what’s right in front of us. Let’s be strategic in our approach and execute on what’s needed for our nations future. #aukus #soverign #defence #australia #technology #research #security #cybersecurity #manufacturing

28

2 Comments

Cluttered Claire’s inbox is full of… well, everything. ATO docs, old memes, research articles, promotional emails—it’s a digital avalanche! She’s had her inbox hacked once, but old habits die hard. Our new article digs into why inboxes make terrible filing cabinets for sensitive ATO documents and how ATO SmartDocs Vault is the smarter solution. Curious? Read the article to understand why Claire’s inbox habit is risky and book a demo to see how the ATO SmartDocs Vault helps users like her keep it all secure and easy to find! 👉Full article: https://lnkd.in/gdekCGrT 👉Book a demo to secure, organize, and simplify your ATO document world: https://lnkd.in/gFEu6GK4 #ATOSmartDocs #ATOSmartDocsVault #Security 

8

“PRC state-sponsored cyber group APT40’s expanding tradecraft and tactics” Australian Signals Directorate Collaboratively, the ACSC forms new joint advisory with the People’s Republic of China (PRC) state-sponsored cyber group, APT40 (Advanced Persistent Threat, as known in open-source reporting) and the current threat it poses to Australian networks. “APT40 continues to find success exploiting vulnerabilities in end-of-life or no longer maintained devices on networks of interest and systems that are poorly maintained and unpatched.” What to implement: 1. Cyber Wardens Certification - https://lnkd.in/gmiFmXZD (recommended by Council of Small Business Organisations Australia (COSBOA) and ABRT ~ Association for Business Restructuring & Turnaround Limited) 2. ASD Essential Eight mitigation strategies - https://lnkd.in/g-jGtK5S 3. Strategies to Mitigate Cyber Security Incidents guidance - https://lnkd.in/gMfGFdWa To find out more about APT40, read the full advisory here > https://lnkd.in/gjJHRQU5 #cyberattacks #ransomware #cybersecurity

8

Best Practices for Event Logging and Threat Detection Australian Signals Directorate Executive summary This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) in cooperation with the following international partners: United States (US) Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) United Kingdom (UK) National Cyber Security Centre (NCSC-UK) Canadian Centre for Cyber Security (CCCS) New Zealand National Cyber Security Centre (NCSC-NZ) and Computer Emergency Response Team (CERT NZ) Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and Computer Emergency Response Team Coordination Center (JPCERT/CC) The Republic of Korea National Intelligence Services (NIS) and NIS’s National Cyber Security Center (NCSC-Korea) Singapore Cyber Security Agency (CSA) The Netherlands General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD). Event logging supports the continued delivery of operations and improves the security and resilience of critical systems by enabling network visibility. This guidance makes recommendations that improve an organisation’s resilience in the current cyber threat environment, with regard for resourcing constraints. The guidance is of moderate technical complexity and assumes a basic understanding of event logging. An effective event logging solution aims to: 1. Send alerts to the network defenders responsible for monitoring when cyber security events such as critical software configuration changes are made or new software solutions are deployed  2. Identify cyber security events that may indicate a cyber security incident, such as malicious actors employing living off the land (LOTL) techniques or lateral movement post-compromise 3. Support incident response by revealing the scope and extent of a compromise 4. Monitor account compliance with organisational policies 5. Reduce alert noise, saving on costs associated with storage and query time 6. Enable network defenders to make agile and informed decisions based on prioritisation of alerts and analytics 7. Ensure logs and the logging platforms are useable and performant for analysts. There are four key factors to consider when pursuing logging best practices: 1. Enterprise-approved event logging policy 2. Centralised event log access and correlation 3. Secure storage and event log integrity 4. Detection strategy for relevant threats. #everydaylearning #compliance #risks #ciberseguridad #cybersecuriy #EventLogging #ThreatDetection

44

2 Comments

Welcome to the team Thanh Tran! Thanh is an experienced Project Manager with a strong background in Agile Methodologies, Business Analysis and Business Process Improvement. His previous engagements include delivering transformation initiatives for the South Australian Police and IT solutions for Naval Group Australia, in addition to various Project and Program Management roles with the Department of Human Services, the Department for Child Protection and the Department Environment and Water. Thanh is also experienced in implementing and rolling out hardware solutions. Thanh lives project success and we are excited to have him on board. 😁 We asked him some questions, he gave us some answers: What energizes you outside of work? 😁 Doing things with family What’s one of your favourite memories from the past year? 🐟 Fishing with my kids What’s one thing most people don’t know about you? 🔢 My age What’s one thing you’re currently trying to make a habit? 🏃‍♂️ Exercise regularly What’s one thing you’re learning now, and why is it important? 🧘‍♂️ How to meditate ‘cause it helps with my concentration What’s something you saw recently that made you smile? 🍰 My mum enjoying her dessert What’s something you’ve done, but will never do again? ⛳ 🏌‍♂️ Play golf What’s the best advice you were ever given? Who was it from? 💀 Nothing in life is absolute accept for death and taxes (can’t remember from whom) What’s your guilty pleasure? 🛌 Sleeping in #team #collaboration #projectsuccess #adept

42

5 Comments

Cyber resilience is important to any business in 2024 - especially for Defence industry. If you're in Canberra on Monday 28th October then consider attending this free presentation from experts on the topic. https://lnkd.in/gqS8Vecx

2

In the August edition of #CompanyDirector magazine, future governance of the Australian War Memorial is in safe hands. Ryan Shaw GAICD on using Australian Defence Force skills and training in the boardroom, how to tackle polarisation and social division around issues of public interest, and a new cybersecurity strategies handbook to help small business and NFP directors. Plus, merging the best of both worlds as corporate governance embraces the relationships and connections of Indigenous governance. Find the August issue here: https://bit.ly/3SvIDbB

18

A security breach could shatter customer trust and your bottom line. Is your organisation truly secure? ADAPT's report reveals 5 key strategies Australian CISOs should be prioritising to fortify their data ecosystems and build resilience. Download the free report to gain actionable insights on aligning your security initiatives with your business goals. [Link to access report in the comments] #CyberSecurity #DataSecurity #Security Pooja Singh Aarjun Sampath Kumar

3

1 Comment

Earlier in the week our Defence Security Manager Scott Wilson attended the inaugural Defence Australia DISP Forum. The event brought together over 900 people from the defence industry to provide important industry updates, and to allow the opportunity for GME and like-minded businesses to discuss shared challenges and to network. Events like these are important to GME and allow us to ensure that our business is as secure as possible as we continue our work in the Australian Defence sector. #australianbusiness #defence #cybersecurity

80

3 Comments

🚀 Exciting News Release: Defence Industry Development Grants Program 🚀 Bluerydge welcomes the new Defence Industry Development Grants Program, a vital enabler for small to medium Defence enterprises. This initiative bolsters Australia’s sovereign capability, global competitiveness, technical superiority, and national security. Aligning perfectly with Bluerydge’s service offerings, we’re ready to help your business leverage this funding for: - Security programs & certifications (ISO 27001, DISP, CMMC) - Cyber security assessments & gap analysis - IT security enhancements - Cyber security monitoring services Whether you’re just starting or need a security uplift, contact us at [email protected]. Learn more: https://lnkd.in/gJgTwHV6 Stay updated by following us on LinkedIn (https://lnkd.in/gdvwHjnS)! Visit Bluerydge to keep up with our latest news, announcements, and initiatives. #DefenceGrants #CyberSecurity #Bluerydge #DefenceIndustry

4

Listen Now: https://lnkd.in/g7GFHyWv The latest episode of the iTnews Podcast hear from Defence Australia CIO, Chris Crozier (GAICD) mentions the move to zero trust and Defence Australia’s adoption of Essential Eight controls as being important in the context of being set up to interoperate with our AUKUS and Five Eyes alliance partners. The iTnews Podcast is brought to you by Zscaler and the 2024 #StateOfSecurity Report: https://lnkd.in/eAYjCiuc (Partner Content) Plus, Zscaler's Ali R. suggested leveraging AI to counter AI-led attacks by detecting anomalies and classifying sensitive data, helping organisations stay ahead in a sophisticated threat landscape. https://lnkd.in/eceiATpf #Cybersecurity #Zerotrust #Endpoint #SecurityStrategy #BusinessTransformation #Defence #Zscaler #iTnewsPodcast #StateOfSecurity

73