CFOtech Australia logo
Technology news for Australian CFOs and financial decision-makers
Story image

Experts place the human factor at the centre of cybersecurity strategies

By Ryan Morris-Reade
Tue 11 Jan 2022

A panel of experts has placed the human factor at the centre of Australian companies' cybersecurity strategies.

According to a new red paper released today by global data, analytics and technology company Equifax, increasingly sophisticated cybercrime threats in Australia have encouraged organisations to evolve their security culture, reporting structures and level of preparedness.

The Australian Cyber Security Centre (ACSC) says Australian corporates reported cybercrime-related losses worth more than $33 billion, with a cyber-attack happening every eight minutes over the 2021 financial year.

Equifax recently put together a panel of cybersecurity experts from the global and Australian business communities to critically discuss global and local best practices. The resulting conversation is in the Equifax red paper Exploiting Humans: The New Insider Threat in Cybersecurity. 

The paper examines the human faces of the problem, the evolving role and responsibility of Chief Information Security Officers (CISOs), and how shaping a cyber-aware security culture within organisations is integral to minimising the growing threat of cybercrime in Australia.

The panel discussion included John Yates, director of security, Scentre Group, Catherine Buhler, CISO, Energy Australia, Jamil Farshchi, CISO, Equifax Group/Global, and Wayne Williamson, CISO, Equifax Australia & New Zealand. It was moderated by James Turner, founder of CISO Lens.

"Cybercrime is a $33 billion people issue, and there is an increased sophistication of attacks exploiting the human link, including advanced ransomware crimes, internal staff being manipulated by threat actors, and cybercriminals exploiting gaps in critical systems," says Equifax A/NZ CISO, Wayne Williamson.

"It's important that organisations are looking closely at the human elements of the threat and human elements of the corporate response."

The red paper coincides with the launch of Equifax's cybersecurity checklist, aimed at helping current and future CISOs manage the human elements of their cybersecurity and insider threat programs. The checklist includes nine key elements:

  • Tailor your strategy
  • Talk about risk and the size of the risk
  • Get buy-in from the top
  • Talk to the whole team
  • Sell the message
  • Have a plan, prepare to change it
  • Assess the intelligence
  • Train behaviour
  • Collaborate

Williamson says it is a testament to businesses growing awareness of the critical importance of cybersecurity that CISO roles entered the picture five or six years ago with more force. But he says many CISOs haven't yet had the liberty of time to establish robust, best-practice cyber risk mitigation programs within their organisations.

Cybersecurity preparedness is ever-evolving, and he says the responsibility lies with the entire organisation, not just CISOs, to address cyber risks head-on. 

Common themes emerged during the conversations with the security leaders on the panel, namely, involving a business security culture driven from the top and conducting threat assessments on people and technology remain core principles to managing these risks.

The red paper contributors and panellists agreed that having a seat at the table during board-level discussions was becoming increasingly important in designing robust security measures and embedding cybersecurity culture into an organisation's DNA.

"At Scentre Group, we've come on a high-speed journey in terms of cyber over the last five years. We now have a pretty mature outlook led by the CEO," says Scentre Group director of security, John Yates.

"Resources don't necessarily follow just because you've identified a problem. But if you have the ear of senior leaders, then you've got a much better chance they'll understand where the investment is needed from a security perspective and why they need to inject it in early, rather than doing the dreadful thing of retrofitting later."

The launch of the red paper captures a growing, urgent conversation within different industries to determine how CISOs, CTOs, C-Suite executives and boardrooms are continuously evolving their cyber strategy to account for both the nuances of industry-specific impacts in the event of a cyberattack and the emergence of new cyber threats that span internal and external, human-led and technology-driven triggers.

"EnergyAustralia is an energy retailer and generator with 2.4 million customer accounts," says EnergyAustralia CISO (group security), Catherine Buhler.

"Our customers share their personal information with us and trust us to handle their data like it's our own. Our approach to cybersecurity is aimed at preventing an incident. We continually apply recommendations made by the experts, combining protections for customers, our people and our assets." 

She says the recent Equifax panel provided a fantastic opportunity for sharing knowledge between different industries and even countries in a collective effort to prevent cybercrime.

Related stories
Top stories
Story image
Employment
Tech job moves - Forcepoint, Malwarebytes, SolarWinds & VMware
We round up all job appointments from May 13-20, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Vectra AI
Understanding the weight on security leader’s shoulders, and how to shift it
Millions of dollars of government funding and internal budgets are being funnelled into cybersecurity to build resilience against sophisticated threats, indicating how serious this issue has become.
Story image
Cybersecurity
More than 40% of banks worried about cloud security - report
Publicis Sapient's new report finds security and the lack of cloud skills and internal understanding of business benefits are big obstacles for banks moving to the cloud.
Story image
Ransomware
Alarming surge in Conti Ransomware Group activity - report
A new report has identified a 7.6 per cent increase in the number of vulnerabilities tied to ransomware in Q1 2022.
Story image
Public Cloud
Cloud adoption still a work in progress, NetApp finds
NetApp has announced the results of the annual Cloud Infrastructure Report based on a survey of public cloud business and IT decision makers.
Story image
SaaS
Atturra partners with Focus HQ to support Aus organisations
Atturra has executed a partnership agreement with Focus HQ, to resell and support the company's Australian developed SaaS-based portfolio management platform.
Story image
Sisense
Data and analytics could be key to higher selling prices in APAC
Sisense's latest report has found that almost half of data professionals in APAC think customised data and analytics can create better selling prices for their products.
Story image
Artificial Intelligence
SAS launches human-focused responsible innovation initiative
SAS has launched a responsible innovation initiative, furthering its commitment to equity and putting people first.
Story image
trust
9/10 Aussies to stop spending if personal data compromised
"Based on the patterns we are seeing among Australian consumers, it is evident that trust in a brand is exceptionally important."
Story image
Digital Transformation
Unlocking the next digital frontier for educational institutions
Understanding where to invest in technology can be challenging for education institutions, especially after the COVID-19 disruptions.
Story image
Digital Transformation
The Huawei APAC conference kicks off with digital transformation
More than 1500 people from across APAC have gathered for the Huawei APAC Digital Innovation Congress to explore the future of digital innovation.
Story image
Artificial Intelligence
Clear Dynamics closes $35M funding round, invests in global growth
The funding is a major milestone and speaks to Clear Dynamics’ vision for AI-enabled ‘composable’ enterprise software, the company states.
Story image
Artificial Intelligence
Updates from Google Workspace set to ease hybrid working troubles
Google Workspace has announced a variety of new features which will utilise Google AI capabilities to help make hybrid working situations more efficient and effective.
Story image
Talend
Talend introduces new data health solutions for businesses
Talend has announced its latest version of Talend Data Fabric, with the release of Talend Trust Score enabling data teams to establish a foundation for data health.
Story image
Alteryx
Decision Inc. Australia enters partnership with Alteryx
Independent data and analytics consultancy Decision Inc. Australia has partnered with automated analytics company Alteryx, expanding its offering to clients.
Story image
Remote Working
IT teams deploy powerful technologies to enable remote work
"We found that IT teams mastered the challenges of remote work last year in large part by employing powerful yet easy-to-use technologies."
Story image
Kodari Securities (KOSEC)
NFT trends and opportunities: expert reveals all
The NFT market is growing at an exponential rate, with unprecedented liquidity. Here we explore how businesses can profit.
Story image
Wasabi Technologies
Wasabi opens new cloud storage in Australia with Equinix
Wasabi Technologies has opened a new hot cloud storage region in Sydney, Australia, using Equinix services. This is the company's 12th global storage region.
Story image
Telstra
Telstra, Google and Accenture launch 5G AR experience for AFL
Telstra, Google and Accenture are developing a new 5G powered augmented reality (AR) experience at Melbourne's Marvel Stadium for the footy season.
Story image
Testing
Google and CSIRO use AI to help protect the Great Barrier Reef
Google has partnered with CSIRO in Australia to implement AI solutions that help protect the Great Barrier Reef.
Story image
Artificial Intelligence
SAS announces new products amid cloud portfolio success
Analytics and AI company SAS is deepening its broad industry portfolio with offerings that support life sciences, energy, and martech.
Story image
Attain
Revenue operations is taking centre stage
As the business world continues to evolve, new demands need to be met to keep up with the ever-changing landscape. 
Story image
Customer experience
Research unveils precarious customer loyalty for retailers
New research has found customers are reassessing established brand loyalties as their priorities and behaviours shift.
Story image
Microsoft
SAS Viya on Microsoft Azure to deliver 204% return - study
The Forrester Total Economic Impact study finds SAS Viya on Microsoft Azure brings a 204% return on investment over three years.
Story image
Adyen
Adyen expands partnership with Afterpay as BNPL payments increase
Adyen has expanded its partnership with AfterPay allowing more of Adyen’s merchants in more countries worldwide to use the BNPL provider.
Story image
Phishing
Google reveals new safety and security measures for users
Google's new measures include automatic two step verification, virtual cards and making it easier to remove contact information on Google Search results.
Story image
Digital Transformation
Trading up: It's time to swap core systems for flexible digital applications
This year will see more oranisations planning and commencing high tech renovations that will shake up the way they operate.
Story image
Data Protection
Barracuda launches new capabilities for API Protection
"Every business needs this type of critical protection against API vulnerabilities and automated bot attacks," Barracuda says.
Story image
Remote Working
Australia’s remote workers face connectivity and security issues
SOTI's new report finds better video conferencing technology and improved security measures are top concerns for remote workers in Australia.
Story image
Fintech
Airwallex launches new bank feed integration with NetSuite
Airwallex has launched a new bank feed integration with NetSuite, developed in partnership with NetSuite solution partner, Onlineone.
Story image
Digital Transformation
Why enterprise records management should be part of any digital transformation strategy
Modern organisations create and rely upon an enormous volume of content, and digital records make up a significant proportion of that content.
Story image
SaaS
Cloudflare launches instant serverless database for dev teams
"Today we’re announcing our first serverless database which we expect will quickly become one of the largest databases in the world."
Story image
Sift
Sift shares crucial advice for preventing serious ATO breaches
Are you or your business struggling with Account Takeover Fraud (ATO)? One of the latest ebooks from Sift can provide readers with the tools and expertise to help launch them into the new era of account security.
Exabeam
Find out how a behavioural analytics-driven approach can transform security operations with the new Exabeam commissioned Forrester study.
Link image
Story image
Mobility
Hands-on review: STM laptop bags
The advent of hybrid working has meant we need laptop bags. We got our hands on two of the most popular laptop bags from STM.
Story image
Remote Working
How organisations can meet employees' changing expectations
The global employment market has shifted dramatically in favour of employees, sparking the so-called great resignation, in which people are leaving unsatisfying roles in search of greener pastures.
Story image
Ransomware
A third of companies paying ransom don’t recover data - report
Veeam's report finds 76% of businesses who are victims of cyberattacks paid the ransom to recover data, but a third were still unable to get their information back.
Story image
Safety
Voxel hits total funding of $18M following ongoing wins
Since raising its seed round in September, Voxel has grown at pace, by decreasing on-site injuries by upwards of 80% and increasing operational productivity.
Story image
Manufacturing
HINDSITE wins Aerospace Xelerated Pitch Challenge with solution to support Boeing
Brisbane-based startup HINDSITE was the winner of the first ever Pitch Challenge organised by Aerospace Xelerated in partnership with Queensland XR Hub. 
Story image
Microsoft
Microsoft unveils adaptive accessories for disability access
Microsoft is introducing an expansive Inclusive Tech Lab to give people with disabilities greater access to technology through new software features and adaptive accessories.
Story image
Artificial Intelligence
CFOs using digital workers and AI to prevent unnecessary loss
New technology is now allowing CFOs to use digital workers to automate their accounting processes, making it easier for them to avoid unnecessary losses.
Story image
Cybersecurity
Hard numbers: Why ambiguity in cybersecurity no longer adds up
As cybersecurity costs and risks continue to escalate, CEOs continue to struggle with what their investment in cyber protection buys. Getting rid of ambiguity becomes necessary.
Story image
Excel
Could your Excel practices be harming your business?
While Excel has been the de-facto standard for budgeting, planning, and forecasting, is it alone, enough to support organisations in the global marketplace that’s facing rapid changes due to digital transformation?
Story image
Tech job moves
Tech job moves - Datacom, Micro Focus, SnapLogic and VMware
We round up all job appointments from May 6-12, 2022, in one place to keep you updated with the latest from across the tech industries.