ASIC's Cyber Pulse Survey 2023 shows a low cyber maturity score of 1.66/4, highlighting reactive approaches to cyber risks. ASIC calls for improved resilience, aligning with the SIX Shields Cyber Strategy 2030 and global trends for stronger cybersecurity practices.
The Australian Securities and Investments Commission (ASIC) unveiled the Cyber Pulse Survey 2023 in November, providing a critical evaluation of Australia's corporate cybersecurity posture. The survey revealed a concerning trend: with an average cyber maturity score of 1.66 out of 4, most organisations are reacting to cyber risks rather than proactively managing them. This assessment, derived from measures of governance, risk management, information asset protection, and incident responsiveness, signals a pressing need for enhanced cyber resilience.
ASIC Chair Joseph Longo stressed the importance of resilience, advocating for regular and rigorous testing of cybersecurity plans. This stance is part of ASIC's larger mission to pinpoint and address industry-specific cyber vulnerabilities, guiding an overall improvement in cyber resilience. The survey's individual reports, received by 95% of participants, provide valuable insights for organisations to gauge their cybersecurity standing against industry benchmarks.
The findings from the survey are pivotal in shaping both ASIC's and the Federal Government's strategic policies, particularly in light of the SIX Shields Cyber Strategy 2030. Endorsed by key figures like Clair O'Neill, this comprehensive strategy aims to enhance the security and handling of financial institutions, addressing emerging concerns in corporate Australia highlighted in the latest regulatory reports.
ASIC's report offers tailored guidelines for organisations, establishing a baseline standard for cybersecurity practices. These standards are expected to influence ASIC's future regulatory actions. Key recommendations include conducting risk assessments, establishing contractual obligations with third parties, identifying critical business services, and implementing advanced encryption and email security practices. The report, useful for both technology experts and leadership teams, outlines red flags and provides practical guidance for meeting minimum standards.
ASIC's regulatory expansion into cybersecurity was notably exemplified in 2020 with action against RI Advice for inadequate cyber protections, a case that set a precedent for future regulation. This expansion aligns with global trends, paralleling initiatives in the U.S. and emphasising the proactive management of cyber risks.
ASIC's ASIC's approach parallels regulatory tightenings seen in the U.S., underscoring a global trend towards heightened cybersecurity vigilance. Like its American counterpart, ASIC is placing increased emphasis on directors' responsibilities to proactively mitigate cyber risks.
In his address at the Australian Financial Review Cyber Summit, Longo warned of potential enforcement actions against boards and directors who neglect cybersecurity and cyber resilience. This stance highlights ASIC's commitment to an "active approach" in managing cyber risks, particularly concerning third-party dependencies.
The Cyber Pulse Survey 2023 and the alignment with the SIX Shields Cyber Strategy 2030 mark a critical juncture in corporate Australia's approach to cybersecurity. This shift towards a more resilient, proactive stance is in line with global trends and reflects a deeper understanding of cybersecurity's importance in the corporate sector.
As regulatory bodies evolve their strategies, companies are encouraged to bolster their cyber defences and align with these new standards, ensuring protection against the dynamic and challenging landscape of cyber threats.
Hacker "UnicornLover67" claims to have data on 47,300 Telstra employees, raising concerns in Australia. The UK launches an AI Security Lab to counter Russian cyber threats. The EU's Cyber Resilience Act mandates strict digital security from December 2024, with heavy fines for non-compliance.
Australia’s push for bold social media laws to protect youth faces challenges, Bunnings sparks backlash over its facial recognition rollout, and AI fuels parliamentary security debates. These key issues underscore the growing tension between innovation, governance, and safeguarding privacy rights.
Global cyber affairs are in overdrive! Australia’s $50M social media crackdown, Nvidia’s $35B AI earnings, and claims of AI breaching parliamentary security highlight a whirlwind week. With 2025 looming, the pace of tech, trade, and policy shifts is only set to accelerate.
Cybercriminals and state-sponsored actors exploit social media for espionage and disinformation. Telegram is under fire for sharing data with Russia’s FSB, prompting Ukraine to restrict it. OpenAI's Ben Nimmo fights AI-driven disinformation targeting U.S. and European elections.
