Peter Maynard

With increasing regulatory expectations around cyber, this is a good reference source, particularly for organisations looking for low-cost controls. Key messages for me are to ensure you are protecting what matters most, and be prepared (the old "it's not if, but when" adage). #cybersecurity #governance #informationsecurity

20

Navigating the complexities of the Information Security Manual (#ISM) Software Development Guidelines can be challenging. That's why Sonatype has created a detailed guide to help Australian developers easily meet ISM software development guidelines. Learn how to: 🔹 Implement best practices for ISM compliance. 🔹 Enhance your security measures. 🔹 Protect your applications from potential threats. Read the full guide and ensure your development process is secure and compliant! https://bit.ly/4d89Uc4

7

Best Practices for Event Logging and Threat Detection Australian Signals Directorate Executive summary This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) in cooperation with the following international partners: United States (US) Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) United Kingdom (UK) National Cyber Security Centre (NCSC-UK) Canadian Centre for Cyber Security (CCCS) New Zealand National Cyber Security Centre (NCSC-NZ) and Computer Emergency Response Team (CERT NZ) Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and Computer Emergency Response Team Coordination Center (JPCERT/CC) The Republic of Korea National Intelligence Services (NIS) and NIS’s National Cyber Security Center (NCSC-Korea) Singapore Cyber Security Agency (CSA) The Netherlands General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD). Event logging supports the continued delivery of operations and improves the security and resilience of critical systems by enabling network visibility. This guidance makes recommendations that improve an organisation’s resilience in the current cyber threat environment, with regard for resourcing constraints. The guidance is of moderate technical complexity and assumes a basic understanding of event logging. An effective event logging solution aims to: 1. Send alerts to the network defenders responsible for monitoring when cyber security events such as critical software configuration changes are made or new software solutions are deployed  2. Identify cyber security events that may indicate a cyber security incident, such as malicious actors employing living off the land (LOTL) techniques or lateral movement post-compromise 3. Support incident response by revealing the scope and extent of a compromise 4. Monitor account compliance with organisational policies 5. Reduce alert noise, saving on costs associated with storage and query time 6. Enable network defenders to make agile and informed decisions based on prioritisation of alerts and analytics 7. Ensure logs and the logging platforms are useable and performant for analysts. There are four key factors to consider when pursuing logging best practices: 1. Enterprise-approved event logging policy 2. Centralised event log access and correlation 3. Secure storage and event log integrity 4. Detection strategy for relevant threats. #everydaylearning #compliance #risks #ciberseguridad #cybersecuriy #EventLogging #ThreatDetection

44

2 Comments

Take proactive steps to protect your Active Directory from common and advanced targeting techniques. Our joint Cybersecurity Technical Report, “Detecting and Mitigating Active Directory Compromises,” with the Australian Signals Directorate’s Australian Cyber Security Centre and others, outlines detailed strategies to prevent and detect malicious cyber actors attempting to access your Active Directory environment. Read the guidance: https://lnkd.in/eQB64DSK

148

7 Comments

Many thanks to 6PR Perth and Jamie Burnett for the kind invitation to discuss data breaches, ways to check if data has been stolen or leaked, job scams and the importance of understanding the powerful nature of data and be very mindful of digital footprint and online presence. Managing digital footprint is an ongoing process that requires vigilance, diligence and understanding of the digital world's dynamics and intricacies. It is about making sure that personal and professional data and information remain secure and private, minimizing exposure and breaches from cyberattacks and reducing vulnerability to these attacks. Swinburne University of Technology Swinburne Australian Graduate School of Entrepreneurship #databreaches #jobscams #dataleaks #cyberattacks #digitalfootprint #stolendata #onlinepresence #scams

5

1 Comment

#lowcodeforgovernment #playbookdownload Building secure, cost-effective citizen experiences with low-code application development (and process automation!) is critical for Queensland Government Departments looking to do more with less. Increased citizen expectations and increased cyber-threats reinforce the need to deliver these powerful customer experiences quickly. Download the Salesforce Low Code Playbook for Government and you'll discover our point of view on how to: ✅ Build responsive apps fast to solve any business problem ✅ Empower your teams to automate their own processes ✅ Create and manage a governance framework & build trust Leaning into a #lowcode #platform approach will increase efficiency, accelerate productivity, and realise cost savings across the program lifecycle. This in turn supports the public sector to create better experiences for your customers. https://lnkd.in/g__3qjq7

25

Is your business doing enough to protect itself from cyber threats? 🛡️ Netcomp has created a comprehensive guide to the Essential 8, a crucial cybersecurity framework for Aussie businesses. Inside, you'll discover: ✔️ What the Essential 8 is and why it's important ✔️Whether it's mandatory for Australian businesses ✔️If your business needs it and at what level ✔️How to implement the Essential 8 effectively If you're serious about protecting your business's data and reputation, this guide is a must-read. https://lnkd.in/gDhFtbny #Essential8 #EssentialEight #Essential8MaturityModels #Essential8Explained #Essential8specialist #Essential8Provider #cybersecurityspecialist #NetcompEssential8 #NetcompITProvider #CyberThreats

1

Looking forward to delivering Government Keynote: Sophisticated Threats Require a Sophisticated Response – Securing Networks and Data

7

Data privacy basics as presented by the Dept Privacy Commissioner Liz MacPherson. AI being a reoccuring topic at the NZ Government Summit. The idea that AI needs human oversight makes good sense.

3

Did you know that 97% of NSW citizens feel that it is important for their personal information to be protected by government? For Privacy Awareness Week, the Acting Privacy Commissioner published the results of the 2024 Community Attitudes Survey into privacy. The survey is conducted every two years, and the results provide a broad and indicative sense of the public’s view of how privacy is regarded in areas such as data breaches by NSW government agencies, citizens’ awareness of their right to access their personal information, where to go to report the misuse of personal information or how to make a privacy complaint. Read more on the findings here: https://bit.ly/4dx2Qqk

13

1 Comment

You will recall that in August 2022, Medibank experienced a major cyber breach that compromised nearly 520GB of personal data from approximately 9.7 million customers. The incident that is in court now highlights several critical areas for improvement in cybersecurity practices: 1. Secure credential storage🔐- Never save sensitive work credentials on personal devices or browsers, as this can lead to serious security breaches. 2. Multi-Factor Authentication (MFA)🔑- Always enable MFA for accessing critical systems as it adds an essential layer of security that can prevent unauthorised access. 3. Prompt response to alerts 🚨- Ensure security alerts are properly triaged and escalated. Swift action can mitigate potential damage. 4. Heed security warnings ⚠️ - Regularly review and act on security recommendations from audits & assessments to strengthen  cybersecurity. 5. Continuous vigilance🛡️- Regularly update and review security protocols to adapt to evolving threats and protect sensitive data effectively. These lessons highlight the importance of having strong cybersecurity measures and staying vigilant. While cybersecurity can often be taxing for both implementers and users, it is nevertheless essential. (For more, see court document: https://lnkd.in/g57rdX49) (Image source: Ideogram, text added manually) #cybersecurity #databreach #dataprotection #InfoSec #Medibank #CQUniversity

21

1 Comment

Cyber threats are on the rise—are you prepared? CERT NZ reports SMEs are hit hardest, facing average data breach costs of $173k. To keep Kiwi businesses safe and thriving, our panel of experts will arm you with the tools you need to uplift your cyber action plan. Join us on Oct 16: https://lnkd.in/ggtEjpYT   Event highlights:  - Engage your workforce in cybersecurity  - Maximize Microsoft & Apple cyber tools  - Fill critical skill gaps  - Assess supply chain risks  - Involve Board/Execs in Cyber Maturity Don’t wait until it’s too late—be prepared!   #CyberSecurity #BusinessProtection #TechSafety Zeopard Network for Learning (N4L) PwC New Zealand Bastion Security Group Jennie Vickers Denise Carter-Bennett Robyn Campbell Sam Shute Geordie B Stewart MSc CISSP

6

It seems it can get worse and for Medibank, this is becoming reality. 11,000 incidents from this data is quite a large number and scary given the effectiveness of the breach to translate into incidents. Wake up call for all those that capture and retain PII without appropriate controls. What will be interesting to see is if penalties leveled by Office of the Australian Information Commissioner changes behavior not just by Medibank but by others as well. Wonder if similar stats are available for the Optus breach? #privacy #privacymatters #cyber #cyberbreach

19

2 Comments

The importance of a data governance strategy cannot be overstated - and the necessity for this to align with the cyber strategy is fundamental to ensure a solid cyber foundation is in place. If a cyber crisis hits, the need to understand what data is at risk must be addressed. #informationassets #datagovernance #cyber

4

Boost your cyber vocabulary! 🚀 From "air gap" to "whaling," Kordia's glossary is designed to make complex terms easy to understand. Stay sharp and keep your team informed about the latest cyber security trends. Explore here - https://lnkd.in/gTnfppDU #CyberSmartWeek #CyberSecurity

6

A report by the Australian Signals Directorate (ASD) found that ransomware attacks accounted for 90% of extortion-related incidents in FY 2023. Prevent your organisation from joining this year’s statistics. Our latest eBook, ‘Bouncing back from a cyber attack’, covers the steps to mitigate ransomware and how to respond should your organisation become a target. Ready to strengthen your cyber resilience? Download your copy … https://hubs.ly/Q02wsrTH0

14

A report by the Australian Signals Directorate (ASD) found that ransomware attacks accounted for 90% of extortion-related incidents in FY 2023. Prevent your organisation from joining this year’s statistics. Our latest eBook, ‘Bouncing back from a cyber attack’, covers the steps to mitigate ransomware and how to respond should your organisation become a target. Ready to strengthen your cyber resilience? Download your copy … https://hubs.la/Q02LckpT0

8