Malcolm Shore

Whilst this article is specific to Water Utilities, the messaging applies across many sectors where data and digitisation is prevalent. #cybersecurity #cybergovernance #datagovernance

6

Unfortunately for brokers and their mortgage clients the worst case scenario has eventuated. Whilst the extent of the incident is still being assessed we'd advise the following precautions be taken - 1. Change any Firstmac related passwords (eg; portal access, etc). 2. Watch out for any fake (phishing) emails or phone calls impersonating Firstmac. 3. Advise any clients using Firstmac of this cyber incident.

1

Medibank Data Breach: A Wake-Up Call for Robust Cybersecurity Measures Medibank's recent data breach, where critical Endpoint Detection and Response (EDR) alerts were allegedly missed, underscores a crucial lesson in cybersecurity. This incident resulted in the exposure of sensitive customer information, highlighting the need for comprehensive Security Information and Event Management (SIEM), Security Operations Centre (SOC), and Security Orchestration, Automation, and Response (SOAR) capabilities. Why SIEM, SOC, and SOAR Matter? SIEM: Ensures real-time threat detection and management by aggregating and analysing log data from multiple sources. SOC: Provides continuous monitoring and quick response to security incidents, reducing the window of exposure. SOAR: Enhances response efficiency by automating routine actions and orchestrating complex workflows. Organisations must reassess their cybersecurity strategies and invest in these critical areas to prevent future breaches. Read more about the Medibank incident here: https://lnkd.in/gFt-AwxV #Cybersecurity #SIEM #SOC #SOAR #DataBreach #Medibank #ITSecurity #RiskManagement

6

2 Comments

Don’t know what to say. As a member it’s scary, and while receiving communication from Unisuper, your thoughts go to a cyber attack. However, it’s more about an “error”. Just wow. Imagine if you were a GC customer that was smaller and this happened. Do you think you would have got the same level of attention or would you be on your own? #Google #Cloud should open up about this whole incident and provide clear details of what happened and what it is doing to make sure it doesn’t happen again. “Once in a lifetime” event is just that until next time. There will be a next time. Unisuper should now have free services for a long, long time as well as substantial compensation.

25

7 Comments

Securing Your Power Platform: Delve into the Essentials of Power Apps Security in the Introduction Ebook. Learn How to Safeguard Your Data and Applications Effectively. #PowerPlatform #Security #DataProtection

2

Windows 11 gives you "chip to cloud" security. Download this Windows 11 security eBook to learn how Microsoft has built security into every layer of Windows, including software, hardware, cloud services and identity.

3

Reflecting on the Medibank Cyber Incident The Medibank breach is a critical reminder of why robust cybersecurity is non-negotiable. Key takeaways include: 1. MFA is Crucial: The breach was initiated via stolen credentials, underscoring the importance of multi-factor authentication. Even better if it is phishing resistant. 2. Continuous Monitoring: Overlooked security alerts can be catastrophic. Stay alert and monitor consistently. 3. Swift Action: The slow response to EDR alerts was detrimental. Immediate action is essential. 4. Educate Your Team: Cybersecurity awareness among all employees is a frontline defense. 5. Incident Response Readiness: A swift and effective incident response plan is a must to minimize damage. 6. Privileged Access Management: Limiting access rights, especially for admin accounts, can prevent extensive damage from breaches. It’s all about following basics !!! #CybersecurityAwareness #PrivilegedAccess #DataProtection #Medibank

68

2 Comments

Many thanks to 6PR Perth and Jamie Burnett for the kind invitation to discuss data breaches, ways to check if data has been stolen or leaked, job scams and the importance of understanding the powerful nature of data and be very mindful of digital footprint and online presence. Managing digital footprint is an ongoing process that requires vigilance, diligence and understanding of the digital world's dynamics and intricacies. It is about making sure that personal and professional data and information remain secure and private, minimizing exposure and breaches from cyberattacks and reducing vulnerability to these attacks. Swinburne University of Technology Swinburne Australian Graduate School of Entrepreneurship #databreaches #jobscams #dataleaks #cyberattacks #digitalfootprint #stolendata #onlinepresence #scams

5

1 Comment

I'm extremely proud to have been selected once again to serve as a judge for the prestigious Australian Cyber Security Awards. It's an immense privilege to be part of recognising and celebrating the outstanding contributions and achievements of individuals and organisations in the cyber security industry. In today's digital age, cyber security is more critical than ever. That's why I believe it's imperative to support and honour those who are leading the way in this field. The dedication and innovation of cyber security professionals play a vital role in safeguarding our nation's security and protecting individuals' digital assets. Sovereign capability in cyber security is not just about national security; it's also about ensuring the resilience and integrity of our digital infrastructure. By promoting and nurturing sovereign capability, we can strengthen our ability to defend against cyber threats and maintain control over our digital future. I'm excited to be part of this important initiative once again and look forward to recognising the exceptional talent and innovation within the Australian cyber security community. https://lnkd.in/gdz9mhnb #AustralianCyberSecurityAwards #AI #aifuture #ciso #cso #cto #cio #ceo #compliance #cyber #cyberdefence #cybernews #cyberresilience  #cybersecurity #CybersecurityCommunity  #cybercrime #cyberrisks #cyberthreats #cyberresilience #cyberattacks #cyberaware #CyberDaily #CyberRiskManagement #cybersecurityawareness #cyberdefense #Data #datagovernance #datasovereignty #datacompliance #dataprotection #DigitalAssets #EmpowerWomenInTech #Governance #informationsecurity #infosec #NationalSecurity #network #safety #security #SovereignCapability #tech #womenintech #womenincybersecurity

6

3 Comments

𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐔𝐩𝐠𝐫𝐚𝐝𝐞: 𝐄𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥 𝐄𝐢𝐠𝐡𝐭 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐟𝐨𝐫 𝐀𝐮𝐬𝐭𝐫𝐚𝐥𝐢𝐚𝐧 𝐒𝐌𝐁𝐬 Australian small to medium businesses (SMBs), take note! The Australian government is stepping up cybersecurity measures by mandating the Essential Eight framework for enhanced cyber resilience. This move extends beyond the top four controls, now requiring compliance with all eight strategies to fortify against cyber threats. 𝐖𝐡𝐚𝐭’𝐬 𝐭𝐡𝐞 𝐄𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥 𝐄𝐢𝐠𝐡𝐭? It’s a robust cybersecurity framework designed to: Prevent Cyberattacks with application patching, control, and hardening. Limit Cyberattack Impact via operating system patching, restricted admin access, and Multi-Factor Authentication (MFA). Ensure Data Recovery and System Availability through daily backups. 𝐖𝐡𝐲 𝐈𝐭 𝐌𝐚𝐭𝐭𝐞𝐫𝐬 𝐟𝐨𝐫 𝐘𝐨𝐮𝐫 𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬: Compliance Tracking: A maturity scale helps you gauge and improve your cyber defense readiness. Mandatory Audits: A comprehensive audit every 5 years ensures consistent security standards. Data Breach Reporting: Businesses with over $3 million turnover must report breaches within 72 hours, under the Notifiable Data Breach Scheme. Impact on SMBs: This framework isn’t just a government directive; it’s a strategic advantage for your business. Achieving the highest maturity level means optimal protection against malware and cyberattacks. Plus, it’s a commitment to your customers’ data safety, enhancing trust and reputation. Take Action: Don’t wait for a breach to occur. Integrate the Essential Eight into your cybersecurity strategy and stay ahead of threats. It’s not just about compliance; it’s about safeguarding your business’s future. #Cybersecurity #EssentialEight #SMBs #DataProtection #Compliance https://lnkd.in/gFPF_KCC

5

In need of an LGA Cyber 360 Implementation Partner? Look no further. Unsure what the LGA Cyber 360 Framework is? You probably don't work in Local Government. That said, many of the recommendations in the LGA Cyber 360 Framework are NOT Local Government specific. Recognising the changing digital threats to your council is the first step in protecting your residents. Implementing solutions to remediate gaps in your armoury is the next logical step and there are quick wins to be had. #identitymanagement #mfa #pam #lgacyber360

12

The recent data breach impacting Firstmac customers underscores the critical importance of robust cyber security measures for businesses. With sensitive information compromised, it's evident that safeguarding data is non-negotiable in our digital era. Businesses must prioritize cyber security by: 1. Investing in employee training 2. Implementing multi-factor authentication 3. Regularly updating software 4. Encrypting sensitive data 5. Conducting routine security audits Let's collectively work towards fortifying our cyber defenses and ensuring the safety and privacy of customer and employee data. #CyberSecurity #DataProtection #BusinessSecurity

1

As much as I'm a technologist (nerd, geek, etc) my view is that adoption of any technology needs to be done responsibly. For me that means safely, ethically and with a sense of accountability. #safeandsecure #certnexus #ethics

2

Here's another unfortunate reminder: you can't protect what you don't know, and the threat of cyber attacks in Australia is growing. An independent 3rd party audits your finances and another your workplace safety policies for good reason, and so it should be for your IT security. Don't leave it to your IT provider - cyber security skills are in short supply. Please reach out for a free, confidential discussion and we will be happy to help you develop a program to boost your cyber shields. #Melbourne #Sydney #stopransomware #cybersecurity #itsecurity #riskassessment #cybershields #Australia #smallbusiness #smallbiz #B2B

5

Need help with Microsoft on-premises to M365 / cloud, sorting Identity, Cybersecurity, Networking, and Infrastructure? Here's a recommendation... You need Prince Bhurji! https://lnkd.in/gWCs-ehz And he is available right now. His contract with us is ending (and we are sad!) Prince is amazing. I mean it. Really, truly impressive. He was hired to come and sort out our cybersecurity, networking, infrastructure and move us from chaotic on-premises to cloud, while sorting out our cybersecurity. But he has done so much more. He has taken care of everything: * Revamping our networking and VPNs for maximum security. Including trusted networks, RADIUS, NPS, the full deal. * Modernising our identity security, conditional access, etc. We now have a 100% MS identity security score. An external consultant told us our tenancy is one of the best he has seen. That's thanks to Prince. * Reviewing and cleaning up resources in our Azure tenancy, securing and setting up just-in-time / PIM access for external vendor access and admins. * Automating cost dashboards so we can monitor spending. * Saving us a ton of money by shifting from an external DC for disaster recovery to Azure Site Recovery, and Azure backup for on-premises. * Teaching us to manage, monitor, and deal with vulnerabilities and rollout security changes. Our MS SecureScore is in the 70s now. * Sorting out our OS, applications, and infrastructure patching. * Revamping our RBACs and security, closing down loop-holes and cleaning up. * Planning and executing our home-drive to OneDrive migration. * Planning and playbooks for our migration from on-premise DCs and infrastructure to all cloud. * Risk reviews and remediation planning and implementation. * Design and architecture. * Lots and lots of tweaks to our M365 systems and teaching us the ropes for administration of M365. And that's just the stuff I remember. Prince is amazing. Absolutely wonderful to work with. A constant ray of sunshine in the team. If you need help M365, moving from old-school to cloud, MS security and identity, choose Prince. You get an architect and experienced doer in one happy package, and that is a very rare thing. You will not regret it. 😎

17

1 Comment

If you're heading to the Victorian Cyber Security Showcase, be sure to drop by for a game of Polemos! We use this game to teach how to coordinate people, process and technology in security planning. While the game itself is very simple, the challenge is getting your team to all agree on an ideal strategy... which can be less simple than it sounds! #infosec #cyber #security #strategy #cyberstrategy #MTG #rakdoswins #phronesis

2