Hanlie Botha

Trying to get approval for security transformation spend? The Australian Institute of Company Directors snapshot on Governing Through a Cyber Crisis is written for directors... but it’s a goldmine for anyone trying to influence budget or transformation spend. 🔎 Tip for reading it: Don’t just scan the director guidance. Instead, ask yourself: if this is how the board expects to act in an incident, how can I shape or reframe my business case or spend proposal so it matches those expectations?

16

1 Comment

Some key highlights from Australian Signals Directorate (ASD)'s Cyber Threat Report 2024–2025: 1. There is a significant rise in cyber incidents and reports: The Australian Cyber Security Centre (ACSC) reported that in during 2024-2025 they have responded to over 1,200 major cybersecurity incidents which is a 11% increase from the previous year. 2. There is a steep rise in the financial impact due to cybercrimes: For businesses, the average loss due to cybercrimes is on the rise, Small businesses lost up to $56,571 a 14% increase from last year, Medium business lost up to $97,166 a 55% increase, and Large businesses lost up to $202,691 a 221% increase. It was also reported that an individual average self reported loss was $36,633 3. Critical infrastructure under increasing threat: Critical infrastructures have received notifications of 190 potential malicious cyber activity impacting their network which is a 111$ increase from last year. The Top 3 most common types of activity which led to infrastructure related incidents were: Scanning or Reconnaissance making up 41% DoS/DDoS making up 31% Phishing making up 20% 4. Credential compromise, email attacks and phishing remain the main methods of attack: It was reported that email compromise with no direct financial loss accounted for ~19% of business reports, Business email compromise with financial loss ~15%, identity fraud ~ 11% and phishing emails remains one of the most common attack methods. 5. New technologies are amplifying the risk like AI The report also warns the rise in the use of Generative AI by cybercriminals as they use these tools to automate the analysis of extensive datasets which allows them to find vulnerabilities, they also use generative AI to create content like videos, text, fake voices, websites etc. to help them trick their target easier. 💡 The big moves organisations must take: a. Implement Effective event logging - You can't defend what you can't see b. Manage legacy IT risks - Legacy technology lets threats thrive c. Effective Third-Party Risk Management (TPRM) - Shut the back door, choose sercure and verifable technologies d. Start preparing for Post Quantum Cryptography (PQC) more details: https://lnkd.in/gCVf9fSq

7

For someone who has worked in the financial services sector across the Pacific including NZ, the managing of technology and cybersecurity risk exist on enterprise platforms. These platforms are not available for the small to medium businesses and even to government agencies due to the high cost. Excel has been the go to tool for risk registers and management of risk. Whilst other platforms targeting SMEs exist I felt a more tailored one for the Pacific was needed. So for the last few months maybe a year I've been putting together this light weight GRC tool called /thatsit risk with the help of Ai tools. It is now LIVE and ready. Feedback welcome. app.thatsitconsultants.com

15

1 Comment

🟣Governing Through a Cyber Crisis: In 2024, the Australian Institute of Company Directors (AICD), in partnership with the Cyber Security Cooperative Research Centre (CSCRC) and Ashurst, released “Governing Through a Cyber Crisis: Cyber Incident Response and Recovery for Australian Directors.” 18 months later, these guidelines are relevant more than ever. ☑️ Readiness: Build the Foundations Before the Breach. Boards are expected to lead from the top, not just sign off on policy. Effective readiness means: - A comprehensive, regularly tested Cyber Incident Response Plan, integrated with business continuity and communications frameworks. - Clear board-level roles and responsibilities, including when to activate sub-committees or crisis structures. - Scenario testing and simulation exercises that involve directors, not just IT teams, ensuring governance mechanisms work under pressure. - Data governance frameworks that clearly identify where sensitive information resides, who owns it, and how it’s protected. - Supply-chain due diligence: recognising that vulnerabilities often sit outside the organisation’s perimeter. ☑️ Response: Act Decisively, Communicate Transparently. - When an incident unfolds, speed and clarity are critical. Boards should expect imperfect information but must ensure that: - Management activates the crisis plan and establishes clear reporting cadence. - Stakeholder communication is transparent, coordinated, and empathetic with customers, regulators, and the market. - Legal and regulatory obligations are promptly addressed. - External experts (forensics, legal, and communications) are mobilised early. - Larger organisations are encouraged to establish a Cyber Incident Sub-Committee to enable agile oversight, freeing the full board to focus on strategic and reputational governance ☑️ Recovery and Remediation: Oversight Beyond the Crisis. - The “long tail” of cyber risk extends months or years beyond the initial event. Boards play a central role in ensuring: - Root-cause analysis is independently reviewed and acted upon. - Remediation programs are well-resourced, customer-focused, and transparent. - Employee wellbeing is prioritised, fatigue and moral strain are common post-incident. - Regulatory investigations, compensation, and class actions are managed with integrity and accountability. - Lessons learned are embedded into the organisation’s cyber governance and shared responsibly with peers to strengthen the wider ecosystem. Boards that treat cyber resilience as part of enterprise risk management, rather than an IT line item will be the ones that navigate crises with credibility and protect stakeholder trust. Read the full report here: https://lnkd.in/eRfjqsUc

11

ASD Releases Annual Cyber Threat Report 2024-25 Highlighting Rising State-Sponsored and Cybercrime Risks 📅 Date: 14 October 2025 📍 Source: Australian Cyber Security Centre (ACSC) 🛡 Subject: Cybersecurity – Key Highlights: 🔧 Case Overview: The Australian Signals Directorate (ASD) has published its sixth Annual Cyber Threat Report (ACTR), covering the financial year 2024–25. The report underscores the growing risks posed by state-sponsored actors targeting Australian government networks, critical infrastructure, and businesses. Cybercriminal activity, including ransomware attacks and data breaches, has also increased, threatening economic and social prosperity. 🔍 Findings: State-sponsored cyber actors remain a serious and evolving threat, driven by strategic objectives. Cybercriminals continue to exploit vulnerabilities for financial gain, emphasizing the need for robust cyber defenses. Key focus areas recommended by ASD for organizations and network owners: Implement best-practice logging. Replace legacy technology. Manage third-party risk. Prepare for post-quantum cryptography. 💼 Regulatory Implications: The report signals the importance of proactive cybersecurity measures for all sectors, from government to private businesses. Organizations are encouraged to strengthen resilience, comply with guidance, and mitigate potential impacts of cyber threats on critical operations. 📌 Strategic Insight: Cybersecurity is no longer optional—state-sponsored and financially motivated cyber threats are increasingly sophisticated and pervasive. Staying ahead requires continuous investment in technology, staff awareness, risk management, and alignment with national cybersecurity frameworks. Link: https://lnkd.in/giRsY3hX 🔔 Follow RegLex for updates on global cyber threats, risk mitigation strategies, and regulatory guidance shaping cybersecurity practices in Australia and beyond. #CyberSecurity #ASD #RegLexUpdates #StateSponsoredThreats #Ransomware #CriticalInfrastructure #RiskManagement #CyberResilience #DataProtection #AustraliaCybersecurity

1

NCSC (National Cyber Security Centre) has just released its 2025 Cyber Threat Report, and one section in particular made my eye twitch a little: “While cyber security is an important focus of the Government, most protections in New Zealand exist outside government. Individuals, private organisations, and industry are best placed to protect data, networked devices, and infrastructure.” In other words, we have quietly outsourced a chunk of our national security to thousands of under-resourced organisations and then hoped for the best. Yep! read that again. If most of the protection exists outside government, does that mean we now have a national infrastructure risk by proxy? That is more than mildly concerning, it is wildly concerning and needs to be reigned in and addressed! New Zealand should be investing in shared platforms, national cyber services that keep essential services running and sharing security insights that reduce national risk and improve public value.

29

5 Comments

Global Compliance Certification Now Offers Essential Eight (E8MM) Audits!!! Global Compliance Certification (GCC) is pleased to announce the launch of our Essential Eight audit and certification service across Australia. As cyber threats continue to escalate, alignment with the Australian Cyber Security Centre (ACSC) Essential Eight framework is becoming a critical requirement, particularly for organisations working with government and critical infrastructure sectors. Our Essential Eight audits help organisations: ✔ Assess and validate maturity levels (Level 1, 2 or 3) ✔ Strengthen cyber resilience against ransomware and targeted attacks ✔ Demonstrate compliance readiness for government contracts ✔ Integrate Essential Eight with ISO 27001 and broader ISMS frameworks With GCC’s extensive experience in ISO 27001, SOC 2, and information security audits, we provide a structured, practical, and business-focused approach to cyber assurance. Learn more about our Essential Eight service here: https://lnkd.in/g-nNtCxv Read the official press release: https://lnkd.in/gsQP9VVY If your organisation is preparing for government work or strengthening its cybersecurity posture, our team is ready to assist. Global Compliance Certification (GCC) 📞 1800 444 800 ✉️ admin@gccertification.com 🌐 www.gccertification.com #EssentialEight #CyberSecurity #ACSC #ISO27001 #InformationSecurity #CyberResilience #gccertification #E8MM

23