Arun Singh

It's Fraud Awareness Week 2024 This year’s focus is all about empowering New Zealanders to spot the signs of phishing, impersonation, and online shopping scams. These are some of the most common threats in today’s digital world, and knowing how to identify and avoid them is key to staying safe online. 🔍 Can you recognize a phishing email? 🎭 Would you spot a scammer impersonating someone you trust? 🛍️ Are you confident shopping safely online? If you hesitated on any of these, we’ve got you covered! Fraud Awareness Week is the perfect opportunity to build your knowledge and take action to protect yourself and your family. Our training platform has easy-to-follow modules to help you stay one step ahead of online threats. Learn how to safeguard your personal information and avoid becoming a victim. Access our training module here: https://lnkd.in/gdbJ5Bz6 Let’s make New Zealand a safer place online, one step at a time. Share this post to spread the word about #FraudAwarenessWeek and help others stay safe too! #CyberSafety #FraudPrevention #PhishingAwareness #OnlineSafety #NewZealand

6

Cyber attackers are good at selecting the right tools to get their job done, are you? In this months bulletin, we dicuss how you should invest in cyber security.

5

Following on from Cyber Awareness Month and Cyber Smart Week, in this months bulletin we deep dive into how to run an effective Cyber Training and Awareness campaign for your workforce. Looking for something different, have a listen to this months bulletin via the Google generated podcast here: https://lnkd.in/g-Xgar-B

7

Hi Backdoors and Breaches participants, I have given some thought to the idea of creating an Incident Coordinators Guide to Backdoors and Breaches. I have decided to go all in on making this guide a reality. I can’t realistically do it alone as I need diverse input from people that coordinate Backdoors and Breaches games for your organization. Here are the table stakes so far: 1. The guide must be free to all readers. This isn’t about profit; rather about giving back to the community. 2. Black Hills Information Security must approve of what we are writing. 3. The guide must, at a minimum, teach potential incident coordinators on how to launch and facilitate a game of Backdoors and Breaches. The call to action: I need help! I am looking for 3-5 writers, and as many contributors as we can muster. What’s in it for you? All contributors will be included in the guide as contributing authors/advisors. Sorry, there is no pay associated with these roles. If you are interested, send me a message here on LinkedIn or email me from my website. #ttx #tabletop #backdoorsandbreaches #bhis #incidentresponse #simulation

25

1 Comment

It's Privacy Week 2024. The OPC states: “Two-factor authentication is a bare minimum we would expect for small businesses or organisations that hold or share personal information digitally. If you are a small business that has a cyber-related privacy breach and don’t have at least two factor-authentication in place expect to be found in breach of the Privacy Act.” But what if your MFA is stolen by attackers? Read this months bulletin to learn how to better protect yourself against this current risk.

9

⚡️Ausgrid, Australia's largest east coast electricity provider, warns that a cyberattack could cost $2.9bn per day, Highlighting the critical need for robust cybersecurity measures. Read more below.     #Cybersecurity #CyberAttacks #CyberNews 

1

The investigation into Bunnings' use of facial recognition technology highlights a critical balance between innovation and privacy. If what Bunnings stated is accurate, that unmatched facial data was automatically deleted within an average of 4.17 milliseconds, it suggests a focus on minimizing data retention and protecting customer privacy. This approach, aimed at reducing risks to staffs and customers (in stores), appears to prioritize safety over unethical uses, such as marketing. Kudos to the Office of the Australian Information Commissioner for releasing a new privacy guide tailored for businesses considering facial recognition technology (https://lnkd.in/g2j2RFDW). This guidance provides a structured framework for evaluating and implementing such technologies responsibly in retail settings. #PrivacyMatters #FacialRecognition #RetailTechnology #CyberSecurity #DataEthics #cybersecurity #securingtheunsecured #cyberresearch

11

Regardless of Industry, the #snowflake compromise has likely come up in conversation, directly or indirectly. The incident highlights the importance of vendor cyber risk management. For years, we've supported kiwi businesses and global entities in this crucial area. Our solutions have saved companies time and money, serving household names and government agencies. Explore our new website to learn more about how we can assist you. https://lnkd.in/gFP42rk3 #cyberriskmanagement #businesssolutions #riskmitigation

5

There is some very good information provided for small business in this document. I recomended a read if you are a sole trader or other small business owner. if you know anyone that fits that description please encourage them to seek this document out.

11

I've spent some time over the weekend looking into what is concerning New Zealand organisations the most about cyber. Over the last three months (in order of priority), visitors to our website read about: - Incident Response Plan (https://lnkd.in/gBHVQPVq) - Incident Response Retainer (https://lnkd.in/gt7hTs7) - CIS Controls - Governance (https://lnkd.in/g_pvrD83) - Cyber Incident Simulations (https://lnkd.in/gdr73faG) - Cyber Training and Awareness (https://lnkd.in/gZ2x6HE3) Of our ten key services, what is interesting is that 'Cyber Training and Awareness' didn't really feature last year in these statistics. This tells us that in 2024 organisations are now increasingly looking for better solutions to solve the Cyber Risk problem. To assist, we've touched up our webpage for this service (https://lnkd.in/giiJ_hmP) and just republished it. We look forward to assisting the organisations that are trusting their delivery of cyber training and awareness, including: - Executive Awareness Training - Cyber Simulations - Online Training via a Learning Management System (LMS) - Phishing Simulations

26

3 Comments

New Cyber Security Act: Key Outcomes for Australian Businesses and Industry** Bill Link: https://lnkd.in/gCSWRCzY The Cyber Security Act is set to significantly enhance Australia’s cyber resilience, with important outcomes that businesses, manufacturers, and suppliers need to know: Mandatory Security Standard: Internet-connected products acquired in Australia must comply with strict security standards to protect against cyber threats. Ransomware Payment Transparency: Reporting obligations are now in place for businesses making ransomware payments, promoting transparency and discouraging such actions. Government Coordination: The National Cyber Security Coordinator will lead across government departments to ensure a unified response to major cyber incidents. Information Protection: Information shared with the government about cyber incidents is protected and won't be used in legal proceedings against reporting entities. Compliance and Enforcement: Strong regulatory powers are in place to ensure businesses adhere to cyber security standards, with penalties for non-compliance. Global Impact: The Act applies both within and outside Australia, meaning international suppliers must comply if their products reach the Australian market. This legislation is a major step towards strengthening Australia's defense against cyber threats and protecting critical infrastructure. #CyberSecurity #TechLaw #Australia #DigitalSafety #Ransomware #Compliance #CyberResilience #Business

13

I was just reading the Lexology article on the pending changes to the Australian Privacy Act, and the new direct right of action individuals will have for serious breaches of privacy, when the below article about a serious lapse of security at Clubs NSW came through. How many lost identities this time? How many more data breaches have to happen before legislation updates arrive? Australian businesses need to take Privacy seriously. This breach was 100% preventable through simple, pragmatic application of techniques we have all been using for decades. I get it. Compliance is boring. But it’s also really effective! #nerdrant #databreach #auspol #privacy #oaic #cybersecurity #compliancenerds #deiterate #ducksinarow https://lnkd.in/g63deSPx

32

7 Comments

SAM for Compliance Ltd has made some minor changes to wording within the New Zealand Local Government Cybersecurity Framework to reflect the Version 8.1 update within the CIS Controls. In most cases the ALGIM framework was already running ahead of the CIS Controls safeguard requirements and the wording changes are minor. This update is now rolled out to all participants in the ALGIM programme who have access to this framework, the Archives New Zealand Information Maturity Model Framework, and the DIA Privacy Framework within the SAM for Compliance engine. ALGIM #localgovernment #cybersecurity

37

The 2024 H1 Notifiable Data Breaches Report from the Office of the Australian Information Commissioner (OAIC) delivers a powerful reminder: “You can likely prevent a data breach by mastering the basics”. The report reveals a concerning rise in data breaches, reaching levels we haven't seen since the pandemic drove a surge in digital dependency back in 2020. Yet, there's a silver lining—63% of breaches impacted fewer than 100 people, and 30% were due to preventable human errors like accidentally exposing email addresses in the wrong field. Malicious cyber attacks account for 38% of all breaches, with phishing leading the pack at 31%, followed closely by ransomware and stolen credentials. But the good news? Strong, unique passwords and phishing-resistant multi-factor authentication (MFA) could have stopped many of these incidents in their tracks. The OAIC also urges organizations to keep a close eye on supply chain risks, referencing the MediSecure and Outabox cases as key examples. #DataSecurity #CybersecurityTips #BreachPrevention #OAICReport #CyberResilience #HumanError #PhishingProtection #MFA #SupplyChainRisk #DigitalSafety #RansomwarePrevention #InfoSec

16

2 Comments

The #SOCI Act has come into effect a few days ago. This is a significant piece of legislation which will put more pressure on Australian critical infrastructure organisations to protect their digital assets.     I recently spoke about this with @BenAbbott from TechRepublic, explaining the need for stronger and more comprehensive data security strategies across CI sectors.    As pointed out by Thales Cloud Security's recent Data Treat Report focusing on Critical Infrastructure, this include the need to prioritise security of the data itself as well as digital identities. This is particularly urgent as more CI organisations are investing in technologies such as #AI and #GenAI, as well as as #QuantumComputing.   Read the full article here: SOCI Act 2024: Thales Report Reveals Critical Infrastructure Breaches in Australia https://lnkd.in/g3tv2M3T #ThalesCloudSecurity

34

1 Comment

RFP Alert! ⚡ Advanced Threat Protection Platform - New Zealand Buyer: A Regional District Council Deadline: Nov 20 Summary: This RFP for managed security services is comprehensive. The NZ regional district (one of the biggest in the country) requires implementing a comprehensive technology stack that includes Security Operations Centre (SOC), Security Information and Event Management (SIEM), and Security Orchestration, Automation, and Response (SOAR) solutions. Potential vendors / service providers: I am not very familiar with local service providers in the area. From basic checking, I found that Canon Business Services ANZ , DEFEND , Content Security , Cogent Limited , Bluechip Infotech New Zealand Limited might be good fits. As far as potential solutions that should definitely weigh in on this - For SIEM: Cybereason, Splunk, Check Point Software For SOAR: Palo Alto Networks, Cyware, Fortinet Link to Technical Specifications - https://lnkd.in/d3ZA6e_E Who else do you think might be a good fit for this opportunity? What do you think is the value of this opportunity? Contact me to receive the bid documents for free.  My only request is to send me contact info or introduce me to people who find this information useful, for future business opportunities. Want to know more about this bid, or receive personalized bid leads for your solution? Connect with me - [email protected] Was this post interesting to you or someone you know? Please share it. Please answer this form to help me understand how I can build a business around my efforts and provide income for my family.  Link to form - https://lnkd.in/drMvDnpQ #RFP #Cybersecurity #SIEM #SOAR #SOC #CISO #MSSP

5