Matt Harvey

#CybersecCon 2024 is closing in on the 18th of Oct! Don't miss out on NZ's largest #cybersecurity event! Register free & see more info at: https://vist.ly/3mggyqm Today we'd like to highlight the ESET workshop, where we'll dive into New Zealand's cybersecurity landscape, powered by global threat intelligence. 🔐 What to Expect at the #ESET Workshop at #CybersecCon 2024! 🔐 The biggest threats from the past year, including ransomware and vulnerability exploits. Combating MFA fatigue with ESET’s single sign-on for Windows, Server, and VPN. Patch management that uncovers hidden vulnerabilities and introduces new features. A spotlight on 24/7 Managed Detection and Response (MDR)—the only distributor-delivered solution in NZ. Insights on Data Loss Prevention and Insider Risk Management with Safetica Cloud. Hosted by Eddie King (Info Security Manager, Tait Communications) and Brad Collins (ESET Enterprise & MSP Business Manager, Chillisoft). #Cybersecurity #ESET #MDR #ThreatIntelligence #PatchManagement #DataSecurity #InsiderRisk #NewZealand #CybersecCon

15

Following on from Cyber Awareness Month and Cyber Smart Week, in this months bulletin we deep dive into how to run an effective Cyber Training and Awareness campaign for your workforce. Looking for something different, have a listen to this months bulletin via the Google generated podcast here: https://lnkd.in/g-Xgar-B

7

New Cyber Security Act: Key Outcomes for Australian Businesses and Industry** Bill Link: https://lnkd.in/gCSWRCzY The Cyber Security Act is set to significantly enhance Australia’s cyber resilience, with important outcomes that businesses, manufacturers, and suppliers need to know: Mandatory Security Standard: Internet-connected products acquired in Australia must comply with strict security standards to protect against cyber threats. Ransomware Payment Transparency: Reporting obligations are now in place for businesses making ransomware payments, promoting transparency and discouraging such actions. Government Coordination: The National Cyber Security Coordinator will lead across government departments to ensure a unified response to major cyber incidents. Information Protection: Information shared with the government about cyber incidents is protected and won't be used in legal proceedings against reporting entities. Compliance and Enforcement: Strong regulatory powers are in place to ensure businesses adhere to cyber security standards, with penalties for non-compliance. Global Impact: The Act applies both within and outside Australia, meaning international suppliers must comply if their products reach the Australian market. This legislation is a major step towards strengthening Australia's defense against cyber threats and protecting critical infrastructure. #CyberSecurity #TechLaw #Australia #DigitalSafety #Ransomware #Compliance #CyberResilience #Business

13

The Australian Signals Directorate recently published "Principles of operational technology cyber security" in conjunction with international partners, new documentation to assist OT decision makers. The guidance covers six principles to help determine if decisions being made are likely to adversely impact the cyber security of the OT environment. This October is #CyberSecurityAwarenessMonth and serves as an excellent opportunity for us to raise awareness of what OT is, the importance of cyber security in OT, and how we can safeguard our critical infrastructure that is the backbone of society functioning. You can read through the official documentation here 👉 https://lnkd.in/g652RGhx #criticalinfrastructure #OTsecurity #operationaltechnology

20

Cyber attackers are good at selecting the right tools to get their job done, are you? In this months bulletin, we dicuss how you should invest in cyber security.

5

One of our favourite topics - cyber governance. Learning from others cyber incidents through guidance provided by CIS Controls supported by the NZ NCSC's guidance.

12

It's Privacy Week 2024. The OPC states: “Two-factor authentication is a bare minimum we would expect for small businesses or organisations that hold or share personal information digitally. If you are a small business that has a cyber-related privacy breach and don’t have at least two factor-authentication in place expect to be found in breach of the Privacy Act.” But what if your MFA is stolen by attackers? Read this months bulletin to learn how to better protect yourself against this current risk.

9

In case this has gone unnoticed; The Secretary of the Department of Home Affairs has issued three mandatory Directions under the Protective Security Policy Framework (PSPF) to government entities to manage cyber security risks to the Australian Government. Of particular interest is Direction 003-2024: Direction 003-2024 Supporting Visibility of the Cyber Threat This Direction requires Australian Government entities to participate in the Australian Signals Directorate’s Cyber Security Partnership Program and for those using threat intelligence sharing platforms, to share cyber threat information with the Australian Signals Directorate. https://lnkd.in/gBW_r5fk #ASD #MicrosoftSentinel #Cybersecurity #PSPF

31

Critical infrastructure providers! 🇦🇺 Is your operational technology (OT) secure? 🔐 A recent article by the Australian Cyber Security Centre (ACSC) discusses the importance of securing OT systems for critical infrastructure. The article provides a framework for securing OT systems, crucial for national security. The six OT Principles are: - Safety is paramount - Knowledge of the business is crucial - OT data is extremely valuable and needs to be protected - OT must be segmented and segregated from all other networks - The supply chain must be secure - People are essential for OT cyber security This framework can help you improve your OT cyber resilience and protect the essential services we all rely on. Kyle Klein of McCrary Institute for Cyber & Critical Infrastructure Security, Annie Fixler of Foundation for Defense of Democracies (FDD), Michael Murphy of Fortinet, Frank Cilluffo of McCrary Institute for Cyber & Critical Infrastructure Security Click the link to learn more about the OT Cyber Security Principles: https://lnkd.in/gN2rG36p #cybersecurity #criticalinfrastructure #OTsecurity #ACSC #Australia #infosec #cyber #industrialcyber #icssecurity #ics

2

🔒 𝗗𝗶𝘃𝗶𝗻𝗴 𝗗𝗲𝗲𝗽 𝗶𝗻𝘁𝗼 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝘁 𝗧𝗼𝗱𝗮𝘆'𝘀 𝗜𝗻𝗻𝗼𝘃𝗮𝘁𝗶𝗼𝗻 𝗣𝗹𝗮𝘆𝗴𝗿𝗼𝘂𝗻𝗱 Today's Innovation Playground deep-dive revealed how the New Zealand Information Security Manual (NZISM) and NIST frameworks perfectly align with our Zero Trust Platform Framework implementation. Key insights from our technical discussion: - Infrastructure standards and security controls should be templated once and deployed consistently - Best practices for physical security, cable management, and asset tracking are crucial for operational resilience - Purpose-built Smart Hubs provide both disaster recovery capabilities and opportunities for innovation - Secure access management and authentication are foundational for modern city infrastructure Most exciting was discovering how many of these security standards we're already meeting through our platform's architecture. This validates our approach of building security and compliance into the foundation rather than treating it as an afterthought. The future of smart cities requires infrastructure that is both innovative and secure by design. We're proud to be setting that standard. #SmartCities #Cybersecurity #Innovation #ZeroTrust #CriticalInfrastructure

5

New Cyber security Bill 2024 for Australia that you should review... New Cybersecurity Legislation for Australia that you should review. Windstil has been following the progress of the proposed Australia Governments Cyber Security Bill 2024 that aims to introduced new legislation focused on enhancing cybersecurity across the broader economy. It’s touted as Australia’s first standalone cybersecurity act. This Bill has now been introduced to parliament. We recommend our customers review the new bill as key elements include mandatory reporting for certain businesses on ransomware payments and a range of other measures business will need to adapt to. You can find a complete breakdown of the Cyber Security Bill 2024 here https://lnkd.in/gvsBRjuB For small and medium business there is going to be increased compliance overhead to adopt a sound cyber security posture across their operations. We understands cyber security can be a daunting topic for many businesses, but we’re here to help. Our Cyber Security Team have developed a cost effective and proven program to implement the Australian Cyber Security Centres (ACSC) Essential Eight framework. We provide an initial analysis of your IT environment, develop a plan and implement the recommended Essential Eight security controls and even develop IT security policies, incident response plans and IT disaster recovery plans for our cyber security customers. Importantly our program is highly cost effective and accessible for small business. It enables our customers to confidently demonstrate to their stakeholders that they are cybersecurity aware, and safe to do business with. For more information please visit our website https://lnkd.in/gnv_ibjz or just give us call on 1300 01 99 88.

9

1 Comment

Monash University - Cyber Security Incident Response Team is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in any Monash University developed products, or vulnerabilities identified in third-party vendor products used by Monash University, unless covered by the scope of another CNA    https://lnkd.in/etWsfpjt    #CVE #CNA #Vulnerability #VulnerabilityManagement #Cybersecurity

18

1 Comment

Monash University - Cyber Security Incident Response Team is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in any Monash University developed products, or vulnerabilities identified in third-party vendor products used by Monash University, unless covered by the scope of another CNA    https://lnkd.in/etWsfpjt    #CVE #CNA #Vulnerability #VulnerabilityManagement #Cybersecurity

1

10 Forward-Thinking Aspects of the Australian Cybersecurity Bill 2024: 1. Mandatory Security Standards for Connected Products: Ensures all connected devices meet strict security requirements to protect against vulnerabilities. 2. Cyber Incident Review Board: A game-changing move that creates an official board to investigate and review major cyber incidents, improving national resilience. 3. Ransomware Reporting Obligations: Introduces compulsory reporting of ransomware attacks, enhancing transparency and response times. 4. Protection of Reported Information: Strong safeguards to ensure that sensitive information shared in incident reports is securely protected from misuse. 5. Extraterrestrial Application: Forward-looking provisions that extend cybersecurity measures to Australian interests beyond Earth, such as satellites and space infrastructure. 6. Regulatory Power for Compliance: New powers for regulatory bodies to enforce compliance and ensure organizations meet cybersecurity obligations. 7. Public Reporting of Cyber Incidents: Encourages accountability through regular, public reports on significant cyber incidents and breaches. 8. Incentives for Cybersecurity: Offers rewards and incentives to businesses for proactively investing in and implementing strong cybersecurity measures. 9. Collaboration with States and Territories: Promotes a unified approach by fostering cooperation between federal, state, and territory governments on cybersecurity policies and responses. 10. Security Implications of Emerging Technologies: Takes a proactive stance on addressing the cybersecurity risks associated with emerging technologies, ensuring Australia is prepared for future challenges. #Cybersecurity #Cyber_Resilience #Emerging_Technologies #Ransomware_Protection #Incident_Response #Tech_Regulation #Cyber_Policy #Cyber_Law #Space_Cybersecurity #National_Security

18

🚫Don't become a victim of cybercrime. By investing in cyber security awareness, you're not just complying with industry regulations; you're proactively building a resilient defence against the ever-evolving landscape of cyber threats. 🛡️Let's work together to create a robust security shield that protects your organisation from harm. 🗓️Contact me for a personalised consultation. #cybersecurity #cybercrime #securityposture

4