Prof. Neil Curtis

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

2

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

26

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

10

1 Comment

#Security #RiskManagement "The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally. Application of the PSPF assures government that entities are implementing sound and responsible protective security practices, and identifying and mitigating security risks and vulnerabilities. " #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse

12

The average ATO accreditation timeframe is between 6 & 12 months. aiComply not only strengthens the cybersecurity foundation intended by NIST 800-53, we do it in record time...Securely and Repeatably!

4

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

1

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

2

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

7

The #FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) have released a “Secure by Design” guide to establishing a safe software deployment program. Developers should ensure code and configuration changes pass through a series of well-defined phases, supported by robust testing. This #CybersecurityAwarenessMonth, learn how software manufacturers can ensure reliability for customers: https://lnkd.in/eTZe_HVE

233

6 Comments

In case this has gone unnoticed; The Secretary of the Department of Home Affairs has issued three mandatory Directions under the Protective Security Policy Framework (PSPF) to government entities to manage cyber security risks to the Australian Government. Of particular interest is Direction 003-2024: Direction 003-2024 Supporting Visibility of the Cyber Threat This Direction requires Australian Government entities to participate in the Australian Signals Directorate’s Cyber Security Partnership Program and for those using threat intelligence sharing platforms, to share cyber threat information with the Australian Signals Directorate. https://lnkd.in/gBW_r5fk #ASD #MicrosoftSentinel #Cybersecurity #PSPF

31

A number of amendments to the recently updated and published Australian Government Protective Security Policy Framework (PSPF). The updated PSPF is a significant step forward in addressing contemporary security challenges. The focus on third-party risk management and the inclusion of technology-specific domains which is crucial for enhancing the protective security posture. Key changes in Australian Department of Home Affairs PSPF Release 2024 include: • Expansion of the protective security domains to include separate domains for risk and technology • Incorporating requirements to address contemporary protective security threats including supply chain security, third-party risk management, foreign interference and security of operational or emerging technology • Improving the accessibility and structure of the PSPF • Providing clear guidance on areas with low maturity or ambiguity within the PSPF • Shifting from a maturity to compliance reporting model to provide more accurate reporting data and enable more valuable analysis of security vulnerabilities. #AustralianGovernment #ProtectiveSecurity #Security #SecurityIndustry #RiskAssessment #AusPol #AusBiz #Securitymanagement #SecuritySolutions #CPTED #Securitybydesign #CriticalInfrastructure #RiskManagement

2

The DFSA's 2024 Cyber Thematic Review has been released. The Review underscores the ongoing importance of cyber security, and that it remains a priority for the DFSA. 641 firms were asked to participate in the Review, which assessed firms’ cyber security maturity and compared results with the outcomes of the 2022 Review. The 2024 Review highlights progress in hygiene practices but points to gaps in third-party risk management, encryption, testing and incident response. Read the full Thematic Review report here https://lnkd.in/gAnhnjvE For more on how our Cyber Security Team can assist you, please reach out to us https://lnkd.in/g7fYNTRD #cybersecurity #dataprotection #compliance

30

The "2023 Top Routinely Exploited Vulnerabilities Advisory" was released today. The advisory is a joint effort coauthored by the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and National Security Agency (NSA), the Australian Cyber Security Centre (ACSC), the Canadian Centre for Cyber Security (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ) and Computer Emergency Response Team New Zealand (CERT NZ) and the the United Kingdom's National Cyber Security Centre (NCSC-UK). As the name suggests, the advisory lists some of the most common CVEs exploited in 2023 and underscores the importance of patch management. The listing includes products from vendors such as Citrix, Cisco, Microsoft, Atlassian, Apache, Barracuda, Fortinet, Zoho, Sophos, Ivanti, Juniper, Red Hat and Rarlabs (WinRAR) to name a few. The Mitigations section (pg. 13) should be useful to all organizations large and small.

2

In July of this year, the Secretary of the Department of Home Affairs issued three mandatory directions under the Protective Security Policy Framework (PSPF) to government entities to manage cyber security risks for the Australian Government. PSPF Release 2024 describes the Government's required minimum protective standards to achieve effective, efficient, and secure delivery of government business, domestically and internationally. Janusnet best-in-class protective marking software exceeds the significant standards outlined in Section 9 (Classifications and Caveats) of the PSPF, including handling for: ✅ Security classification ✅ Minimum protections and handling requirements ✅ Information management markers ✅ Security caveats and accountable material ✅ Email protective marking standard ✅ Recordkeeping metadata ✅ Historic and third party classifications Explore our solutions or contact us to find out how Janusnet can help assure your agency's PSPF compliance with proven, straightforward, cost-effective protective marking. https://lnkd.in/gevs42R8 #data #dataclassification #compliance #zerotrust #cybersecurity

1

New Directions have been issued today under the Protective Security Policy Framework (PSPF). These Directions support the Australian Government's commitment under the 2023-2030 Australian Cyber Security Strategy to strengthen the cyber maturity of Government departments and agencies.

166

7 Comments

⚫️Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC)—in partnership with CISA, U.S. government and international partners—released the guide Principles of Operational Technology Cybersecurity. This guidance provides critical information on how to create and maintain a safe, secure operational technology (OT) environment. 👉🏻The six principles outlined in this guide are intended to aid organisations in identifying how business decisions may adversely impact the cybersecurity of OT and the specific risks associated with those decisions. Filtering decisions that impact the security of OT will enhance the comprehensive decision-making that promotes security and business continuity. #OTCybersecurity #OTISPFeeds

4