Nigel Phair

I have been talking about the importance of a data strategy and data governance for a long time, particularly in the context of cyber and information security. Interesting that this article points to the importance of both from an AI perspective as well. #ai #artificialintelligence #datagovernance

16

2 Comments

With increasing regulatory expectations around cyber, this is a good reference source, particularly for organisations looking for low-cost controls. Key messages for me are to ensure you are protecting what matters most, and be prepared (the old "it's not if, but when" adage). #cybersecurity #governance #informationsecurity

20

The importance of a data governance strategy cannot be overstated - and the necessity for this to align with the cyber strategy is fundamental to ensure a solid cyber foundation is in place. If a cyber crisis hits, the need to understand what data is at risk must be addressed. #informationassets #datagovernance #cyber

4

Small and Medium Enterprises (SME) and Not-for-Profit (NFP) sectors face an impossible challenge of increasing cyber threats and reducing budgets. It’s a delicate dance to ensure cyber resilience when the resources, both human and financial, are scarce. Directors of the Boards are accountable for cyber risk and therefore need to ensure sufficient resources are allocated, instead of just assuming that CIOs will take care of it. Independent assurance of your cyber posture is essential.

3

A National Framework for the Assurance of Artificial Intelligence in government has been endorsed following the recent Data and Digital Ministers Meeting (DDMM) in June 2024. The IPC encourages NSW agencies to consider how the new Framework supports their existing responsibilities to protect privacy and transparency in the context of AI and automated decision-making. Agencies should specifically consider updating their Agency Information Guides (AIGs) to include descriptions of how this technology is being used. View the framework: https://bit.ly/3XCeP0h

18

Goodness. See the report within the article. "However, it used the report to urge Victorian departments to adopt data and analytics to detect “fraud and corruption risks”." "Two departments that were audited, the Department of Jobs, Skills, Industry and Regions (DJSIR) and the Department of Transport and Planning (DTP) currently use data analytics to “proactively identify fraud and corruption risks” prior to awarding supplier contracts." "This approach should be adopted more widely, the report said, recommending that departments “set up regular data analytics reviews to assess their procurement activities for fraud and corruption risks”." “At a minimum, this involves collating and centralising data so they can export and review it,” VAGO added. https://lnkd.in/gpM2giFC

11

1 Comment

This is a valuable resource for those interested in enhancing their understanding of information security management. Standards Australia has released an informative webinar on ISO/IEC 27001. It provides a solid overview and practical guidance on implementing effective security best practices. Highlights include: 👠 An introduction to ISO/IEC 27001 standards. 👠 Insights on developing a stronger information security management system. 👠 An interactive Q&A session with experts. 🎥 This webinar is a great tool for professionals looking to deepen their knowledge in cybersecurity. I found it enlightening and think you might too. Let me know what you think how this would relate to ageing societies and HR? #CyberSecurity #InformationSecurity #StandardsAustralia #ISO27001 #DataProtection #RiskManagement #Compliance #InfoSec #SecurityManagement #TechTalk #ITSecurity #CyberRisk #DataSecurity #DigitalTransformation #BusinessContinuity #Privacy #Technology #ProfessionalDevelopment #CyberAwareness #SecurityAwareness #EnterpriseSecurity #NetworkSecurity #SecurityBestPractices #CyberDefense Standards Australia

1

Excellent AICD’s Essential Director Update 2024 from Brisbane yesterday. I always enjoy this annual event as it shines a light on current issues boards are dealing with. It was no surprise to me that two of the significant themes addressed were on AI and cybersecurity. A clear message from the first speaker, Christine Holman, was that as a Board member, you can’t govern AI if you don’t have a basic understanding of the technology. Ms Holman also discussed cybersecurity and the need for Boards to be prepared for a major cyber incident and to run regular, independently facilitated Board simulations. I liked Ms Holman's proposition that you should consider yourself one of two types of organisations: one that has already dealt with a cyber breach, or one that has been breached but they just don't realise it yet. I’m available for Board work in for-purpose organisations should your organisation need AI and cybersecurity expertise. Alternatively, you can read the Second Edition of my book which has added content addressing these topics. Technology will continue to increase in complexity and organisations will continue to become more reliant on technology. Now is not the time to bury your head in the sand when it comes to digital risks. My book is available here: https://lnkd.in/gtDih3br I’m also available to talk to executive teams and Boards about the importance of understanding digital risks and the controls required to mitigate these risks, should your organisation have the need.

38

1 Comment

Many thanks to 6PR Perth and Jamie Burnett for the kind invitation to discuss data breaches, ways to check if data has been stolen or leaked, job scams and the importance of understanding the powerful nature of data and be very mindful of digital footprint and online presence. Managing digital footprint is an ongoing process that requires vigilance, diligence and understanding of the digital world's dynamics and intricacies. It is about making sure that personal and professional data and information remain secure and private, minimizing exposure and breaches from cyberattacks and reducing vulnerability to these attacks. Swinburne University of Technology Swinburne Australian Graduate School of Entrepreneurship #databreaches #jobscams #dataleaks #cyberattacks #digitalfootprint #stolendata #onlinepresence #scams

5

1 Comment

October 2024 Edition of the Australian Institute of Company Directors Magazine. #Cybersecurity ranks as the number-one concern for businesses, followed by financial, legal and regulatory risks, a new report has found. In partnership with YouGov, McGrathNicol surveyed more than 300 C-suite executives and board directors across Australian businesses with 50 or more employees. Cyber risk was a top-five concern for 2024 for 68 per cent of organisations, the highest of any risk category. The report found 71 per cent of organisations don't conduct due diligence on their key suppliers' cybersecurity practices, and over 75 per cent don't require mandatory reporting of cyber or data breaches affecting their suppliers. While 87 per cent of surveyed organisations were confident their business has a comprehensive insider risk management program in place, less than a third have implemented fundamental insider risk controls. Only 28 per cent use a risk-based vetting and due diligence framework for employees and suppliers or contractors, while only 27 per cent have education/awareness programs in place, and just 18 per cent have appointed an authority accountable for insider risk. BSI Learning #CybersecurityAwarenessMonth

13

3 Comments

Data privacy basics as presented by the Dept Privacy Commissioner Liz MacPherson. AI being a reoccuring topic at the NZ Government Summit. The idea that AI needs human oversight makes good sense.

3

With the increase in attention on Domestic Violence and Youth Crime, it is more important than ever to focus on TRUE Case Management. Case Roles and Effective Dating play a critical role in protecting vulnerable individuals. Let's work together to ensure that our case management strategies are effective and efficient in keeping our communities safe. #DomesticViolenceAwareness #YouthCrimePrevention

9

Industry opportunity: Provision of cyber security support to Queensland small and medium enterprises:

8

During the recent Comms Connect Melbourne Congress and Exhibition event two weeks ago, cyber security specialist Vanessa Leite spoke about the current cyber threat landscape and its implications for the public safety communication sector. According to Leite, who is an executive council member TechWomen NZ and Principal Strategy & Consulting analist at CyberCX there are some key takeaways: Complexity of Cyber: Leite discussed factors that are adding complexity the cyber landscape, such as artificial intelligence and the commoditisation of threats, both of which are significantly enhancing ... Click the link below to read the full article. We cover: #criticalcommunications #lmr #pmr #satellitecommunications #mcx #pttoc #controlrooms #TCCA #bodycamera #publicsafetycommunications #emergencycommunications

3

Join me to understand standards and AI use #standards #AI #ethicalAI

11

The Department of Home Affairs has introduced a new iteration of the Protective Security Policy Framework (PSPF), reflecting the Australian Government's commitment to addressing contemporary security threats. This release marks the beginning of an annual series aimed at enhancing the security landscape for government operations. Key Changes in PSPF Release 2024: 1. Expanded Protective Security Domains: Introduction of separate domains for risk and technology. 2. Focus on Contemporary Threats: New requirements for supply chain security, third-party risk management, foreign interference, and the security of emerging technologies. 3. Improved Accessibility: Enhanced structure for easier navigation and understanding of the PSPF. 4. Clarity on Low Maturity Areas: Clear guidance for areas previously lacking clarity. 5. Shift to Compliance Reporting: Transition from maturity-based to compliance reporting for more accurate data on security vulnerabilities. The PSPF assurance function will assist government entities in reporting their security posture and identifying vulnerabilities, fostering continuous improvement. Security is a collective responsibility, and the Department of Home Affairs is dedicated to working with government partners and the community to bolster protective security measures for the Australian public. Find more information about PSPF Release 2024 and future updates on the Annual PSPF Releases page.

21

2 Comments

🚨 Attention Cybersecurity and Forensics Professionals 🚨 I’m conducting a pivotal survey as part of my PhD research at Edith Cowan University. The study examines the impact of Industry 4.0 and Industry 5.0 on digital forensics frameworks, processes, and solutions, particularly focusing on technologies like IoT, AI, and advanced robotics in critical infrastructure and operational technologies. 🔍 Who Should Participate? ·      CISOs, executives, and senior leaders managing cybersecurity breaches and crisis situations, whether in a consulting role or as a client ·      Cybersecurity professionals with expertise in digital forensics, threat intelligence, or incident response ·      Forensics experts with knowledge in operational technology, Industry 4.0/5.0, or related areas ·      Individuals with a strong background in any form of forensic analysis 💼 Why Participate? ·      Your insights will aid in enhancing digital forensics frameworks, processes, and solutions, especially in investigating incidents and determining the 5Ws (Who, What, When, Where, and Why) and how of cyber events, particularly in the context of emerging technologies like IoT, AI, and advanced robotics. ·      Contribute to refining strategies for integrating these advanced technologies into forensic investigations and improving overall incident response. 🔒 Participation Details: ·      Anonymous or named responses are welcome ·      Time Commitment: 15-30 minutes, depending on how much you wish to share ·      Survey Closes: September 6, 2024, at midnight 📣 Help Us Spread the Word: If you know others who fit these criteria, please share this survey within your network. Your contribution will be invaluable! Thank you for your time and support! #Cybersecurity #DigitalForensics #IoT #AI #AdvancedRobotics #Industry4 #Industry5 #Criticalinfrastructure #OperationalTechnology #ResearchSurvey #PhDResearch Edith Cowan University 📊 Link to Survey:

11

2 Comments

Data and Digital Ministers have agreed on a set of nationally consistent approaches to the safe and ethical use of AI in government projects and programs https://lnkd.in/gSnmV8au #AI #gov #Aus

2

The weather in Canberra today lends itself to a focussed study session. Uncanny timing for a deep dive into the five most common management mistakes in cyber security. Cyber GRC is the new cool. #cyber #GRC #governance #risk #compliance #resilience #mba #incident #BCP #IRP #businesscontinuity #communication #strategy #planning

47

2 Comments