Denny Wan

There is some very good information provided for small business in this document. I recomended a read if you are a sole trader or other small business owner. if you know anyone that fits that description please encourage them to seek this document out.

11

The Essential 8 is a set of baseline cybersecurity strategies developed by the Australian Cyber Security Centre (ACSC) to help organisations mitigate cyber threats. The Essential 8 framework provides a pragmatic approach to enhancing cybersecurity by focusing on eight key areas, explained here: https://lnkd.in/g_WY4WjS

2

CPS230 dependence on CPS234 It is only 7 more sleep before the CPA Australia webinar "Cyber Risk Disclosure Requirements under the Operational Risk Management Standard" next Tuesday. It almost feels like Christmas, but, at least for me and the 300+ registered attendees, it's even more exciting. I know. I know. Please spare me with your accountant's jokes. What could be exciting about such a webinar? Given that CPS230 will come into enforcement in just over a year (on 1st July 2025), there is no time to waste to be prepared for compliance. While I am not an expert in operational risk management, I know something about CPS234 compliance, which is mandated in paragraph 25 of CPS230. Please draw attention to CPA Australia members in your organisation to this webinar. Registration link below. I want to thank Sandun Wickramasinghe and Tina Lyroid for the opportunity to present to their members. https://lnkd.in/g5ACvB46

16

Responding to and Recovering from Cyber Attacks Queensland Audit Office (QAO) report highlights significant gaps in Queensland public sector entities' preparedness for cyber incidents, emphasizing the need for updated risk assessments, regular testing of response plans, improved crisis communication, and enhanced technical capabilities. My 3 key takeaways 👉 𝗦𝘆𝘀𝘁𝗲𝗺 𝗮𝗻𝗱 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗔𝘀𝘀𝗲𝘁 𝗔𝘄𝗮𝗿𝗲𝗻𝗲𝘀𝘀: Entities lack up-to-date listings of systems and assets, hindering risk identification and assessment, requiring regular risk assessments for key systems 👉 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗣𝗹𝗮𝗻𝗻𝗶𝗻𝗴: Many response plans are untested or outdated, necessitating regular reviews, scenario playbooks, and clear crisis communication strategies​. 👉 𝗧𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗖𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗦𝗸𝗶𝗹𝗹𝘀: Public sector entities often lack in-house expertise, needing comprehensive training plans and external specialist skills for effective cyber incident response #audit #cyber #darktrace

8

The Australian Signals Directorate’s (#ASD) Australian Cyber Security Centre (#ACSC), has just released an advisory report on #APT40 activity, including #IOC and #TTP and mitigation strategies. APT40 is a Chinese threat group responsible for many #cyberespionage campaigns in the region and globally. This is an important read if you work in #cybersecurity and #DFIR. #infosec #CISO #malware #threatintelligence https://lnkd.in/gvCFpM5R

61

How many out there know that there is an Australian government approved cyber security framework and certification? No, it's not Essential 8. Although Essential 8 is the "go to" framework from the ACSC, that's not what I'm referring to. SMB1001 has been brought to market by Cyber Security Certification Australia (CSCAU) and is available now for any organisation to certify themselves against. 5 tiers, to cater from small business to larger organisations well into the mid-market space. MyCISO and CyberCert have partnered up to bring the SMB1001 framework into our Assess platform to provide a really great way for those organisations who don't want to go down the ISO 27001 or full NIST CSF path to baseline their maturity, and be able to prove to their customers that they have taken reasonable steps to secure thier cyber posture. This same framework can be used as an excellent baseline to assess your supply chain as well. Fewer control requirements, but focused on the things you really need to know when assessing risk in your 3rd parties. Reach out to us here at MyCISO, or get in touch with Cyber Security Certification Australia (CSCAU) if you want to learn more. Stay safe out there! #cybersecurity #smb1001 Dane Meah Nick Anderson Ryan Ko Peter Maynard

66

4 Comments

Researchers from Elastic have analysed an interesting campaign where the threat actors have abused the #Microsoft Management Console (#MMC) for initial access and defence evasion, dubbed #GrimResource. #infosec #cybersecurity #DFIR #cybercrime #CISO #malware #IOC #threathunting #threatintelligence #YARA https://lnkd.in/g_npTqEM

25

CYBERSECURITY ADVICE ISSUED FOR APAC, USA & CANADA The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and similar organisations in New Zealand regarding ‘guidance on modern approaches to network access security’. The advice issued focuses on three specific approaches namely: zero trust, secure service edge (SSE), and secure access service edge (SASE). It also covers the threats associated with VPNs virtual private networks, remote access and VPN misconfiguration. https://lnkd.in/eDWva3gy The key words here are MODERN and SECURITY – VPNs are last century’s technology and were not designed with security on mind, they are easy to breach and time-heavy in IT management. We SDWAN and SASE Solutions already have a tried and tested solution that fits this guidance (guidance issued on June18th, but the article in the above link is just 17hrs old). Our solution is called OMNIA and it’s been around for a good while now, it includes technology from our world class ecosystem of some of the world’s most trusted tech vendors such as Check Point Software, Thales and Console Connect . If you already have OMNIA in your business you are ahead of this recently issued advice…. And most importantly, ahead of the cyber criminals! FIND OUT ALL ABOUT OMNIA HERE https://lnkd.in/dedqXDJn . #APAC #USA #CANADA #cybersecurity #VPN #cyberattacks #telcos #CISA #CISO #CTO #CIO

9

2 Comments

Lookout! The NCSC has issued a warning about a multi-stage phishing campaign affecting New Zealand organizations since at least 05 June 2024. Compromised user accounts are being used to send phishing emails via Microsoft OneDrive/SharePoint sharing invitations, potentially from trusted contacts, redirecting users to malicious websites to harvest credentials. Organizations are advised to stay vigilant, monitor for suspicious activity, and educate staff on being cautious with sharing links, particularly from external domains. It's recommended to implement additional security measures to counter this threat. https://lnkd.in/g8MH_fRr #CyberSecurity #Phishing #NCSC #SecurityAwareness

21

1 Comment

Cybersecurity threats are an ever-present danger in the digital ecosystem of modern businesses. As a Chief Information Security Officer (CISO), Incident Response (IR) teams, or IT Manager, the responsibility to prepare for, manage, and mitigate these threats falls squarely on your shoulders. The importance of comprehensive incident management cannot be overstated, which is why this blog post delves into the crucial elements of training, testing, and evaluation. Siege Cyber is an Australian-owned and operated cyber security company focusing on cyber security services. Our goal is to help our customers secure their organisation. www.siegecyber.com.au contact@siegecyber.com.au #incidentmanagement #training #testing #evaluation #ciso

2

Recent data breach scandals, paired with the explosion of artificial intelligence and deepfake technologies, have dramatically changed the digital trust landscape. According to the Australian Competition and Consumer Commission’s National Anti-Scam Centre (NASC), the number of scams reported in 2023 increased to 18.5 per cent, with more than 601,000 reports made over the year. "Developments in cybercriminals’ capabilities mean attackers increasingly use artificial intelligence (AI) and machine learning technologies to make increasingly sophisticated, effective campaigns. The top cybersecurity risks consumers and businesses are facing in 2024 reflect the pervasiveness of this technological edge," says Dr Eila Erfani, School of Information Systems and Technology Management (SISTM) of UNSW Business School. What are the biggest cybersecurity threats? Read the full #newsroom article: https://lnkd.in/gBPnNUQh

15