Dan Elliott

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

2

Australia's New PSPF Update: Mandating Insider Risk Management to Combat Growing Foreign Interference and Insider Threats In a bold step to protect national assets, Australia has updated its Protective Security Policy Framework (PSPF), requiring insider risk management (IRM) programs across government entities. Thanks to our partner DTEX Systems for this insightful report #PSPF #CyberSecurity #InsiderRisk

17

The average ATO accreditation timeframe is between 6 & 12 months. aiComply not only strengthens the cybersecurity foundation intended by NIST 800-53, we do it in record time...Securely and Repeatably!

4

🦘 Chart of Australian National Security Agencies 🫨 Confused by all the acronyms and agencies? Can't tell the difference between ASD, ASIS, ASIO or ACIC? 👉 Patrick Fair has put together this fantastic infographic outlining the security agencies, departments, committees and key roles that operate within Australian government and how they relate to each other. Thankyou Patrick! 👉 Full credit to Patrick Fair Associates, link to download and more infographics here: https://lnkd.in/ggYxDgie #cyber #cybersecurity #australia #asio #government

85

5 Comments

🚨Queensland Government has published: 🤖Artificial Intelligence Governance Policy https://lnkd.in/gwSrUurQ ✅Foundational AI Risk Assessment (FAIRA) 1. Framework https://lnkd.in/gdCRmX2v 2. Guideline https://lnkd.in/guKUwji4 and 3. Appendix A: When is a FAIRA needed? (.docx) https://lnkd.in/gu9tXkWa The AI policy and FAIRA products align with Australia’s National Framework for the Assurance of AI in Government https://lnkd.in/gWMC7JRi within the Queensland legislative, regulative, values and policy context.

95

9 Comments

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

26

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

10

1 Comment

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

12

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

1

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

2

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

7

#security #intelligence #risk "The assessment paints a picture of a world in which New Zealand and New Zealanders are increasingly exposed to a range of security risks and in which the country’s geographic remoteness no longer serves as a safety blanket. It describes a “deteriorating violent extremist environment” globally, warning that the conflict in Gaza is being used for online radicalisation. “White identity motivated violent extremism” remains the dominant ideology of its kind in New Zealand, with a small number of faith-motivated cases beginning to re-emerge. A growing area of concern is what it calls “mixed, unstable and unclear ideologies” where people are embracing multiple, often contradictory, violent extremist narratives. The overall threat of a terror attack is assessed as “low” but that still means it is a “realistic possibility”. "https://buff.ly/3z1FsBV #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

2

ASIO has today raised the National Terrorism Threat level from Possible to PROBABLE, meaning there is credible intelligence, assessed to represent a plausible scenario, indicate an intention and capability to conduct a terrorist attack. Organisations are urged to review their current security arrangements and Risk Assessments to determine how the lifting of the threat level may impact their business. To access information on the National Threat Level and the ANZCTC Protecting Crowded Places of Terrorism and other guidance documents, go to https://ow.ly/LevO50SQQGQ What are the implications for your organisations risk management planning?

3

Is AI complacency (particularly with respect to the deployment of autonomous systems in battlefield scenarios) compromising the security of battlefield systems? This is a valid question, especially given the complexity of autonomous AI augmented control platforms, when even developers aren’t certain about how their AIs work - or what their vulnerabilities are. Food for thought. #ai #uavs #autonomoussystems

2

Best Practices for Event Logging and Threat Detection Australian Signals Directorate Executive summary This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) in cooperation with the following international partners: United States (US) Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) United Kingdom (UK) National Cyber Security Centre (NCSC-UK) Canadian Centre for Cyber Security (CCCS) New Zealand National Cyber Security Centre (NCSC-NZ) and Computer Emergency Response Team (CERT NZ) Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and Computer Emergency Response Team Coordination Center (JPCERT/CC) The Republic of Korea National Intelligence Services (NIS) and NIS’s National Cyber Security Center (NCSC-Korea) Singapore Cyber Security Agency (CSA) The Netherlands General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD). Event logging supports the continued delivery of operations and improves the security and resilience of critical systems by enabling network visibility. This guidance makes recommendations that improve an organisation’s resilience in the current cyber threat environment, with regard for resourcing constraints. The guidance is of moderate technical complexity and assumes a basic understanding of event logging. An effective event logging solution aims to: 1. Send alerts to the network defenders responsible for monitoring when cyber security events such as critical software configuration changes are made or new software solutions are deployed  2. Identify cyber security events that may indicate a cyber security incident, such as malicious actors employing living off the land (LOTL) techniques or lateral movement post-compromise 3. Support incident response by revealing the scope and extent of a compromise 4. Monitor account compliance with organisational policies 5. Reduce alert noise, saving on costs associated with storage and query time 6. Enable network defenders to make agile and informed decisions based on prioritisation of alerts and analytics 7. Ensure logs and the logging platforms are useable and performant for analysts. There are four key factors to consider when pursuing logging best practices: 1. Enterprise-approved event logging policy 2. Centralised event log access and correlation 3. Secure storage and event log integrity 4. Detection strategy for relevant threats. #everydaylearning #compliance #risks #ciberseguridad #cybersecuriy #EventLogging #ThreatDetection

44

2 Comments