ASIC's Cyber Pulse Survey 2023 shows a low cyber maturity score of 1.66/4, highlighting reactive approaches to cyber risks. ASIC calls for improved resilience, aligning with the SIX Shields Cyber Strategy 2030 and global trends for stronger cybersecurity practices.
The Australian Securities and Investments Commission (ASIC) unveiled the Cyber Pulse Survey 2023 in November, providing a critical evaluation of Australia's corporate cybersecurity posture. The survey revealed a concerning trend: with an average cyber maturity score of 1.66 out of 4, most organisations are reacting to cyber risks rather than proactively managing them. This assessment, derived from measures of governance, risk management, information asset protection, and incident responsiveness, signals a pressing need for enhanced cyber resilience.
ASIC Chair Joseph Longo stressed the importance of resilience, advocating for regular and rigorous testing of cybersecurity plans. This stance is part of ASIC's larger mission to pinpoint and address industry-specific cyber vulnerabilities, guiding an overall improvement in cyber resilience. The survey's individual reports, received by 95% of participants, provide valuable insights for organisations to gauge their cybersecurity standing against industry benchmarks.
The findings from the survey are pivotal in shaping both ASIC's and the Federal Government's strategic policies, particularly in light of the SIX Shields Cyber Strategy 2030. Endorsed by key figures like Clair O'Neill, this comprehensive strategy aims to enhance the security and handling of financial institutions, addressing emerging concerns in corporate Australia highlighted in the latest regulatory reports.
ASIC's report offers tailored guidelines for organisations, establishing a baseline standard for cybersecurity practices. These standards are expected to influence ASIC's future regulatory actions. Key recommendations include conducting risk assessments, establishing contractual obligations with third parties, identifying critical business services, and implementing advanced encryption and email security practices. The report, useful for both technology experts and leadership teams, outlines red flags and provides practical guidance for meeting minimum standards.
ASIC's regulatory expansion into cybersecurity was notably exemplified in 2020 with action against RI Advice for inadequate cyber protections, a case that set a precedent for future regulation. This expansion aligns with global trends, paralleling initiatives in the U.S. and emphasising the proactive management of cyber risks.
ASIC's ASIC's approach parallels regulatory tightenings seen in the U.S., underscoring a global trend towards heightened cybersecurity vigilance. Like its American counterpart, ASIC is placing increased emphasis on directors' responsibilities to proactively mitigate cyber risks.
In his address at the Australian Financial Review Cyber Summit, Longo warned of potential enforcement actions against boards and directors who neglect cybersecurity and cyber resilience. This stance highlights ASIC's commitment to an "active approach" in managing cyber risks, particularly concerning third-party dependencies.
The Cyber Pulse Survey 2023 and the alignment with the SIX Shields Cyber Strategy 2030 mark a critical juncture in corporate Australia's approach to cybersecurity. This shift towards a more resilient, proactive stance is in line with global trends and reflects a deeper understanding of cybersecurity's importance in the corporate sector.
As regulatory bodies evolve their strategies, companies are encouraged to bolster their cyber defences and align with these new standards, ensuring protection against the dynamic and challenging landscape of cyber threats.
This week’s Cyber Pulse Mid-Week Briefings cover Australia’s new Cyber Security Bill, rising ransomware claims, Zscaler's AI-driven platform growth, and cyber threats from East Asia, including Chinese influence operations, North Korean tech theft, and costly global data breach claims.
Telegram is tightening its policies, sharing user IPs and phone numbers of criminals with authorities. As hybrid warfare blends state-backed hacking with cybercrime, Telegram faces pressure to curb illegal activities exploiting its encryption features.
DDoS attacks are on the rise globally, targeting the Middle East, Israel, Ukraine, and key sectors like software, telecom, and banking.
BlackSuit Ransomware Strikes Again! The notorious hackers behind last year's Dallas attack have rebranded as BlackSuit, now demanding $500 million in ransoms! The FBI and CISA confirm the group's new identity, with aggressive tactics and enhanced methods to pressure victims into paying up.
