CISOs in healthcare organisations are working hard to tighten security controls but pervasive issues with user errors, limited staff and financial resources, and a relentless flood of aggressive attacks by data-hungry cyberattackers, are hindering their progress – and even security executives admit they’re not doing anywhere near as good a job as they should be.
David Braue | 12 Jun | Read more
Improving attention and retention rates may have shown that humour is a better training tool than fear, but a security-training pioneer believes the two will come together productively as cyber insurers crack down on training and impending ‘Phishing 2.0’ features allow CISOs to engage with employees the second they click on a malicious link or attachment.
David Braue | 22 May | Read more
Increasingly complex populations of medical devices are creating new challenges for healthcare CISOs and their teams that are increasingly assuming responsibility for operational technology (OT) networks, according to an analysis of live healthcare systems that flagged a host of active security problems.
David Braue | 21 May | Read more
Few businesses are in a position to plan strategically on a five or ten-year timeframe, but when it comes to encryption CISOs need to expand their horizons.
David Braue | 14 May | Read more
Australia’s notifiable data breaches (NDB) scheme will have forced the disclosure of around 950 data breaches in its first year of operation, but experts warn that many companies still lack the internal capabilities to comply with breach-reporting requirements around evaluating the extent of any incident.
David Braue | 22 Feb | Read more
Michael Sutton is the CISO of ZScaler. He has forged a long career working in information security and has seen many changes over the years. We spoke to him at AusCERT 2016 about his career, the changing role of the CISO and what he’s seeing in the world of infosec.
Anthony Caruana | 27 May | Read more
"It is really powerful when a business executive or Board of Directors grasp the significance of this new risk area and start to drive security decisions and opportunities rather than reacting to scare stories."
"It is important for organisations to understand that using the cloud does not mean they have “outsourced” their risks and that someone else is taking care of it."
If we're lucky, We'll all have a chance once in our careers to take a risk and use our skills and experience to do something we truly love. Sometimes the career risk is low, but sometimes it's truly a leap of faith--one that offers potentially big rewards as well as the risk of major setbacks.
George V. Hulme | 29 May | Read more