Shana Uhlmann

Curious about New Zealand’s migration trends? Explore the data yourself! Do you want to understand how NZ’s migration story is evolving through data? With MBIE’s Migration Data Explorer (MDE), you can access comprehensive up-to-date migration statistics at your fingertips. Whether you’re a policymaker, researcher or just someone interested in how migration is shaping the future of New Zealand, this interactive tool has what you need. The MDE offers: ·       A single interface that its easy to explore migration statistics. ·       A framework that goes beyond visa numbers, helping you analyse migration’s impact on population and the labour market. ·       Customisable views, allowing you to explore visa and application types and more, all updated with the latest information from Immigration New Zealand. Recently refreshed with September 2024 data, the MDE offers a unique opportunity to stay informed of migration trends. Check out the Migration Data Explorer today, and start uncovering insights that matter to you: https://lnkd.in/grPAZyyj. #Migrationdatadomain #MDE #ExcellentMahi Veronica Kletzkin, Peter Campion, Andrew Hoy

5

1 Comment

Cyber crime is on the rise. Do you know where your vulnerabilities lie and what they might mean for your business? Cyber crime can include anything from hacking and data breaches to phishing scams and ransomware. Understand your risks and take the first step in protecting your business by securing your spot to the Australian Cyber Security Summit today! Secure your tickets now: https://bit.ly/3uHb0e5 Palo Alto Networks #AustralianCyberSecuritySummit #technology #cybersecurity #defence #information #IT #innovation

1

October 2024 Edition of the Australian Institute of Company Directors Magazine. #Cybersecurity ranks as the number-one concern for businesses, followed by financial, legal and regulatory risks, a new report has found. In partnership with YouGov, McGrathNicol surveyed more than 300 C-suite executives and board directors across Australian businesses with 50 or more employees. Cyber risk was a top-five concern for 2024 for 68 per cent of organisations, the highest of any risk category. The report found 71 per cent of organisations don't conduct due diligence on their key suppliers' cybersecurity practices, and over 75 per cent don't require mandatory reporting of cyber or data breaches affecting their suppliers. While 87 per cent of surveyed organisations were confident their business has a comprehensive insider risk management program in place, less than a third have implemented fundamental insider risk controls. Only 28 per cent use a risk-based vetting and due diligence framework for employees and suppliers or contractors, while only 27 per cent have education/awareness programs in place, and just 18 per cent have appointed an authority accountable for insider risk. BSI Learning #CybersecurityAwarenessMonth

13

3 Comments

Did you know that 60% of targeted cyber-attacks in Australia hit SMBs but only 14% are prepared to defend themselves? Don’t assume your business is too small to be targeted. Implementing strong cyber security measures following the Australian recommended framework, the Essential 8, is important to protect what matters most. Our guide covers everything you need to know about the Essential 8. Check it out now and ensure your business has the right level of security 🔐 #FutureITServices #Essential8 #ASD #Cybersecurity #ITservices

2

Last week, the Australian Signals Directorate (via the ACSC) released its highly-anticipated six “Principles of Operational Technology Cyber Security”. Like the Essential Eight for IT systems, this publication intends to set out a common list of critical controls that should be in place for all OT systems - endorsed by comparable organisations from the US, UK, Canada, New Zealand, Germany, Netherlands, Japan, and Republic of Korea. Over the coming weeks, Phronesis Security will provide guidance on addressing each Principle, based on our experience securing organisations with challenging OT environments. Arguably, the most critical is the first: ‘Safety is paramount’. OT systems have a complex attack landscape, comprised of lots of peripheral technology – often known as the “low hanging fruit”. These are increasingly targeted by both nation-state actors who may seek to disrupt critical infrastructure and opportunistic cybercriminals for financial gain, notoriety or reputational damage. In our experience, the following key considerations must be met to ensure safety is paramount: • When security controls fail, safety must be prioritised. Just how a locked door provides no security if it is a fire that prevents it from opening, a firewall failure that stops a SCADA system from sending a stop signal to a PLC can be dangerous. • Testing controls regularly is crucial to ensure they fail in a manner that upholds safety and minimise risks in critical situations. • Redundancy must be thoroughly built into safety-critical systems, including sensors and other essential components, to ensure continuous safe operation. • Manual procedures that take over when automated systems fail must be tested regularly, and employees should be well-trained to safely execute these processes. • Auditing and maintaining system integrity is vital in safety-critical environments. If an adversary can tamper with the system undetected, it could lead to severe safety issues. To ensure you’re designing your security controls to preference safety above all else, these are the key questions to ask: • Do we know what happens when our security controls within our Operational Technology environment fail and do they fail safely? • Do we consider the impact to safety in risks to our Operational Technology systems? • Do we have ways of detecting when an adversary makes changes within our environment? For example, an unauthorised change to a PLC. You can learn more about the Principles at the ACSC’s website here: https://lnkd.in/g652RGhx #infosec #resilience #OT #otsecurity #operationaltechnology #criticalinfrastructure #SOCIAct #SLACIPAct #cyber #techjobs #cybersecurity #phronesis

11

A security breach could shatter customer trust and your bottom line. Is your organisation truly secure? ADAPT's report reveals 5 key strategies Australian CISOs should be prioritising to fortify their data ecosystems and build resilience. Download the free report to gain actionable insights on aligning your security initiatives with your business goals. [Link to access report in the comments] #CyberSecurity #DataSecurity #Security Pooja Singh Aarjun Sampath Kumar

3

1 Comment

We are into the second week of #cybersecurityawarenessmonth. I am very impressed with all the work that has gone into the collateral from the Dept of Home Affairs, ACSC and ASD. Something for everyone. I had some time on the weekend to catch my breath and review some of the great collateral. Naomi and Juneel provide a great overview! #cybersecurityawarenessmonth #cyber #Australia [May contain traces of generative AI]

3

Auscert 2024, learning and talking all things Information Security with Alexander Uhde #auscert2024

10

Cybersecurity is a non-negotiable aspect of doing business in the modern world – and for Australian businesses, the Australian Signals Directorate (ASD) Essential 8 framework is a benchmark for best practices in cyber defence. Yet there remains confusion over whether adherence to this protocol is a recommendation or a regulatory must. This post sets out to clarify the status of the ASD Essential 8 for Australian businesses and compliance professionals, detailing why and how to integrate these practices into your cybersecurity strategy. Siege Cyber is an Australian-owned and operated cyber security company focusing on cyber security services. Our goal is to help our customers secure their organisation. www.siegecyber.com.au [email protected] #asdessential8 #mandatoryinaustralia #ciso #cybersecurity

6

The State of Cloud Security Platforms and DevSecOps: A new survey by Cisco and Enterprise Strategy Group reveals the true contours of cloud native application development and security

1

Small Business Cyber Security: How to secure your small business from common cyber security threats. Credit: The Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC) #cybersecurity #Smallbusiness

5

The Essential Eight (E8) is a set of #cybersecurity strategies developed by the Australian Signals Directorate (ASD) to help organisations defend against cyber threats. By focusing on these fundamental strategies, organisations can build a robust foundation for their cybersecurity efforts, improving their overall resilience and making it more difficult for attackers to succeed. Some key benefits from implementing these strategies include: ✅ Enhanced Security Posture: The E8 can significantly improve defence against common #cyber #threats and can help mitigate various types of attacks, including #malware, #ransomware, and exploitation of known #vulnerabilities. ✅ Improved Incident Response: With proper backup and security configurations, organisations can recover more swiftly from security incidents and reduce impact. ✅ Regulatory Compliance: Many industry regulations and standards require strong cybersecurity measures. Implementing the E8 can help meet these compliance requirements. ✅ Cost Efficiency: Addressing vulnerabilities and securing systems proactively can reduce potential costs associated with cyber attacks, including data loss, recovery, and reputational damage. ✅ Simplified Security Management: The E8 provide a clear, prioritised approach to cybersecurity, making it easier for organisations to implement and manage their security practices. To learn more about the #EssentialEight or how it can be implemented across your organisation, visit ASD's website link below or get in touch with our team today. 👉 https://lnkd.in/eN8YWkfT

12

https://lnkd.in/etFZF7PQ Cyber security training once a year isn’t working We all know how important it is to keep our people up-to-date on the latest cyber threats. After all, with cyber attacks on the rise, staying one step ahead is crucial to protect your business from potential breaches. But here’s the thing – annual cyber security training just isn’t cutting it anymore. Sure, it’s become a routine part of the calendar for many organisations. And it’s great that it’s happening at all. But ask any security leader, and they’ll tell you… employees find it time-consuming and uninspiring. From clicking through slides to skimming through videos at double-speed, it’s usually seen as just another box to tick. And let’s be honest, even for those who do engage with the training, there’s little evidence it leads to real behaviour change. That’s because the traditional approach lacks interactivity and doesn’t connect with employees on a personal level. It’s more about ticking boxes than building a culture of cyber security vigilance. Guess what? There’s a better way. It’s all about small, regular, human-centric interventions. Think of it like the speed signs you see when you’re driving. They remind people to stop and think before they engage in risky behaviour. Just as the signs work for driving, this kind of training makes your employees more aware of what they’re clicking. By nudging employees toward safer decisions in real-time, we can help them develop better cyber hygiene habits without overwhelming them with information overload. It’s about empowering them to make smarter choices every day. And with the amount of Generative AI and third-party tools we’re surrounded with right now, it’s more important than ever to give employees the guidance they need to navigate potential risks. Whether it’s through real-time coaching or policy reminders, we can help employees understand the importance of safeguarding sensitive data. So, while there may be a place for annual training, it’s time to think about using a more proactive approach to cyber security education. This is something we can help you with. If you want to learn more, get in touch.

1

The 2025 Gartner CIO and Technology Executive Survey gathered data from 3,186 respondents, including 109 from ANZ across the public, private and non-profit sectors. Eighty-eight percent of Australian and New Zealand (ANZ) CIOs and technology executives revealed cybersecurity remains the top technology investment in 2025. Top CIO Focus Areas for 2025 📌Managing cybersecurity and other technology risk is the leading priority for 82% of ANZ CIOs 📌Managing technology financials (59%); 📌Demonstrating the business value of IT (52%); 📌Innovating and modernizing enterprise applications and software (51%) #cybersecurity #riskmanagement #ANZ #Gartner

33

Gain professional development in cyber security with Essential Eight Training! 💻 In today’s digital landscape, strong cyber security skills are essential. This course, designed by the Australian Signals Directorate, Australian Cyber Security Centre and delivered by TAFEcyber, equips cyber security and IT professionals with the knowledge and hands-on training needed to thrive. Throughout the course, you’ll delve into the Essential Eight strategies, gaining insights to assess and enhance your organisation’s cyber security posture effectively. With a mix of expert-led sessions and practical exercises, you'll develop the skills to identify vulnerabilities, implement robust security measures, and stay ahead of potential threats. Whether you’re looking to upskill, advance your career or ensure your organisation’s safety, this course is your pathway to success! Ready to take the next step? Discover more and enrol for Term 4 👉 https://lnkd.in/dDxnj9M4 #TAFEcyber #EssentialEight #CyberSecurity #ProfessionalDevelopment

31

2 Comments

For those of us who have been hit by a data breach (think Optus, Medibank, Latitude and ClubsNSW etc ) there is good news in the budget: 🔹The Federal Government allocated 288m to progress the Digital ID System - see article for breakdown ➡️ https://lnkd.in/gJq6KYfE We OVERSHARE way too much personal information everytime we provide copies of our paper passports and plastic licences. 🔹 $23.4m allocated to pilot digital wallets and verifiable credentials 🔹 importantly there will be pilots to explore use cases for same. It’s also good news for businesses who carry the burden of retaining copies 🤦🏻 of ID documents and other personal information as part of their KYC/PoI obligations. Shout out to Minister Katy Gallagher for her strong leadership in driving this reform - which is critical National Infrastructure to enhance privacy, security and service delivery for the 21st century 🙏

1,602

181 Comments

Excited to share that I've completed the Human Aspects of Security & Privacy micro credential from the Australian Institute of Applied Technology! 🎓 Key takeaways from the course: - Understanding factors that influence information security culture - Techniques for building and fostering a positive security culture - Exploring Leadership's pivotal role in shaping security culture A big thanks to Matthew Mansour for running this program. #ProfessionalDevelopment #InformationSecurity #LeadershipDevelopment

51

13 Comments