Steven Tuften BAppSc, MAAI(Prof), DTM

A start on identifying Microsoft Graph Application Role Risk. Currently a work in progress, as I can't find an authority for role risk. The logic currently applies Medium (for organisational risk) and High for a risk to both the platform functionality and the organisation. https://lnkd.in/gFxK6ijn #microsoftgraph #cyber #identityandaccess #entraid

53

7 Comments

The Ministry for Business, Innovation and Employment in New Zealand is championing a balanced, risk-based approach to AI regulation, in line with global standards such as the OECD's AI Principles. #AI #Microsoft #OECD #MBIE

9

Great to see local data that demonstrates why shadow IT, lack of process, and disregard for enterprise architecture not only escalates risk, but also cost 🤑 #riskmanagement #shadowIT #enterprisearchitecture #bestpractice #complexity #fiscalresponsibility

4

10 Comments

AI Product Lifecycle Governance Critical updates to Australia's AI Governance Framework have recently been released to ensure greater safety and fairness for Business, Government and Consumers. This is the start of improved transparency and will enable Industry and Government to be able to scale more safely and fairly.

2

Truly appreciate the transparency of #google in revealing the cause of the #UniSuper incident. A good (though painful) lesson learnt where it is also revealed the fact that we should “expect the unexpected”. Putting right level of resiliency and transparency does help to maintain the trust with the customers and business partners, while turning crisis into opportunities.

11

1 Comment

Dreadful. Wake up call for all those BCP and risk professionals! No matter how mature you think your CSP process controls are such failures can still happen in some other form or shape in the future. Lesson is to always keep backup images for your crown jewels external to your provider and conduct DR exercises.

2

Attending 6degrees 6DAI conference https://lnkd.in/g7xmb9cw Great presentations this morning. We have a long way to go with adopting AI in its totality, especially with the speed that it's evolving at. Main takeaway for me is; Stop talking about AI, create the guide rails, ethical AI practice and then use it for the quick wins that saves time and removes the burden on humans to automate processes #6DAI

6

While AI is making noise, there is another software movement happening. The open source community is starting to make pretty sexy free software that is aiming right at some of the big players like Salesforce, Atlassian, Okta, Dropbox, Slack and more. Here are the top 5 that are trending across Github, while not yet suitable for enterprise, if you are a small team of under 100 people these should likely go on your radar as a way to save $$ and have a cleaner, easier platform to use. Twenty - Very good looking CRM | twenty.com Huly - Taking on both Jira and Slack | huly.io Hanko - A full auth system taking on Auth0 | www.hanko.io Papermark - Document management like DocSend | www.papermark.io Dub - Bitly like Short links for Marketing | dub.co The play here is that people won't bother running their own instances and instead opt for their Cloud offerings, the beauty of this setup though is even if you do end up paying for the Cloud, you always have an escape hatch which isn't something that is available for many of the incumbents in the space.

52

9 Comments

The Australian Prudential Regulation Authority (APRA) has written to all regulated entities to provide further insights and guidance on common cyber control weaknesses. This letter is part of APRA's ongoing commitment to supervising cyber resilience across industry. Common issues have been observed in terms of security in configuration management, privileged access management and security testing. 💡 Key Takeaways: 🔸Weaknesses in basic cyber hygiene practices remain a major risk for businesses. 🔸Limited board-level oversight on cyber resilience can lead to gaps in security. 🔸Incident response plans are often incomplete or outdated, reducing their effectiveness. Entities across banking, superannuation and insurance must remain vigilant and proactively implement strategies to mitigate risks posed by the evolving and escalating cyber threat landscape. #CyberResilience #CyberSecurity #IncidentResponse #BoardOversight #ciso #cio https://lnkd.in/eNa_hH3C

9

If you are in the Australian #Government space, check out the Australian Government Data Catalogue via the Office of the National Data Commissioner. It is now live, offering nearly 60,000 data assets held by Australian Government agencies! #PowerBI #DataAnalytics #BI

27

3 Comments

The data is gone

2

1 Comment

UniSuper outage was an unprecedented event happened in Google Cloud per the joint statement. Even a recovery site was in place, both prod and DR were accidentally deleted. Luckily UniSuper has backup data in a separate cloud provider for a DR (and rebuild) purpose. It gives an important note about the “offsite backup”. In the on premise world, we do separate DR site with an alternate location (or event vendor), and do data backup with a separate storage medium (aka Tape) as the last resort of backup. When we moved to cloud, we have to think about the necessity to store data into a separate environment (even more it is a separate cloud provider), or even multi cloud providers to maintain the resiliency and avoid possibility of single point of failure. Yes #cybersecurity is important, but we should also think the fundamentals of #resiliency , #disasterrecovery . There’s no absolute answer on the context above, it really depends on the business criticality , technology adoption , and after all the cost effectiveness.

38

Google's Cloud CEO Thomas Kurian has weighed in on the UniSuper fiasco. The multi region setup accidentally deleted... These incidents are possible, always ask the "What if question....?" "How do we recover...?" #cloud #privatecloud #dr #businessplan #gcp #google #aws #microsoft #azure https://lnkd.in/er_MNmEh

8

I have been talking about the importance of a data strategy and data governance for a long time, particularly in the context of cyber and information security. Interesting that this article points to the importance of both from an AI perspective as well. #ai #artificialintelligence #datagovernance

16

2 Comments

So, #GCP had a little mishap – accidentally deleted the main account and with it the redundancies from another geography for UniSuper resulting in a blackout for the firm's more than half a million users and $125 billion fund. A gentle reminder of the importance of staying alert in the world of auto setups and provisioning. While going multi-cloud or even multi-account setups might seem daunting, putting all your eggs in one basket? Well, that can spell disaster. Also, major props to the brains behind UniSuper's backup and disaster recovery plan! 🏅 #ops #cloud #disasterrecovery

9

Just finished the course “Azure AI Fundamentals (AI-900) Cert Prep: 3 Computer Vision Workloads on Azure” by Emilio Melo! Check it out: https://lnkd.in/gyeXgsxH #computervision #microsoftazure.

18

1 Comment

Unisuper's Google Cloud Incident: Emphasizing Change Management Introduction: The recent Unisuper-Google Cloud incident highlighted the crucial role of change management in organizational resilience. This article examines the incident in the context of change management and its broader implications. The Incident: Unisuper faced disruptions when its Google Cloud account was unexpectedly deleted. This incident underscores the necessity of robust change management practices. Change Management Importance: 1. Risk Mitigation: Effective change management minimizes risks associated with system changes. 2. Communication: Clear communication among stakeholders facilitates smoother transitions. 3. Contingency Planning: Developing robust contingency plans enhances organizational resilience. 4. Compliance: Change management ensures adherence to regulatory requirements and governance standards. Conclusion: The Unisuper-Google Cloud incident emphasizes the critical link between change management and organizational resilience, urging organizations to prioritize robust change management practices to navigate transitions effectively. https://lnkd.in/gpc7MBm9

17

5 Comments

What are ANZ data professionals talking about? If you haven’t yet had the chance to check out The Writers Hub at https://lnkd.in/gNXGU822, here’s a sneak peek at some recent articles, covering insights and topics from data practitioners across all levels. Don't forget to also follow us on our Data Professionals Community Linkedin Konnect with Data Page

9