Darren Philips

Responding to and Recovering from Cyber Attacks Queensland Audit Office (QAO) report highlights significant gaps in Queensland public sector entities' preparedness for cyber incidents, emphasizing the need for updated risk assessments, regular testing of response plans, improved crisis communication, and enhanced technical capabilities. My 3 key takeaways 👉 𝗦𝘆𝘀𝘁𝗲𝗺 𝗮𝗻𝗱 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗔𝘀𝘀𝗲𝘁 𝗔𝘄𝗮𝗿𝗲𝗻𝗲𝘀𝘀: Entities lack up-to-date listings of systems and assets, hindering risk identification and assessment, requiring regular risk assessments for key systems 👉 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗣𝗹𝗮𝗻𝗻𝗶𝗻𝗴: Many response plans are untested or outdated, necessitating regular reviews, scenario playbooks, and clear crisis communication strategies​. 👉 𝗧𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗖𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗦𝗸𝗶𝗹𝗹𝘀: Public sector entities often lack in-house expertise, needing comprehensive training plans and external specialist skills for effective cyber incident response #audit #cyber #darktrace

8

This is a must read for all my PubSec Policy wonks. My Cloud Safe Task Force partner, Mitre, has published a series of outstanding recommendations for incoming 2025 Administration. These are sound recommendations that should be consider by both parties. Thanks you Dave Powner for this great work; https://lnkd.in/gGbseTS2

6

1 Comment

The ROK has laid out the National Cybersecurity Basic Plan which sees the integration of offensive and defensive approaches in national cyber defence to address cyber threats targeting critical information infrastructure. Specific thrusts I found noteworthy include: - tackling misinformation, disinformation and malinformation - leveraging emerging technologies and innovation in defence - developing a Korea Risk Management Framework - enhancing and implementing national risk management across the public-private organisations for national security - participation in cyber norms discussions - participation in international cooperation for cyber defence and cyber crime prevention https://lnkd.in/g9z8kGjE

3

You're Only As Secure As Your Last/Next Change! Principle B5 Resilient networks and systems of the National Cyber Security Centre(NCSC)'s Cyber Assurance Framework (CAF)..... "The organisation builds resilience against cyber attack into the design, implementation, operation and management of systems that support the operation of essential functions." ...... includes the use of segmentation as part of its guidance recommendations: "In the event of an incident, it is more likely that an essential function will be able to continue where the networks and information systems that support it are segregated from other business and external systems. Separation of system architecture, remote access and privileged access are some key principles that can protect more critical systems from external compromise." "B5.b Design for Resilience You design the network and information systems supporting your essential function(s) to be resilient to cyber security incidents. Systems are appropriately segregated and resource limitations are mitigated." Now those businesses that are preparing for compliance with the European Union's Network and Information Security (NIS) 2 Directive (17 Oct 24), may be thinking this is just a case of sticking a network security device between your essential functions and the lower-function areas. Not quite....! It is highly unlikely that the rulesets on these network security devices will never change and that these changes may compromise the appropriateness of the segmentation. https://lnkd.in/eUUwVWEF #networksecurity #segmentation #nis2 #europeanunion

1

1 Comment