ASIC sues for systemic and prolonged cybersecurity failures
ASIC sues FIIG for systemic and prolonged security failures ASIC has commenced a law suit in the Federal Court of Australia. ASIC alleges that from March 2019 to 8 June 2023, FIIG Securities Limited failed to take the appropriate steps, as is required by an Australian Financial Services (AFS) licensee, to ensure it had adequate […]
SIEM solutions for incident management
SIEM solutions for incident management – Use cases This article examines practical use cases: How we’ve used SIEM solutions for incident management. It demonstrate how SIEM strengthens security operations and prevents costly incidents. Security Information and Event Management (SIEM) solutions are often seen as complex and expensive. However, their true value lies in mitigating financial, […]
Using the NIST Cyber Security Framework (CSF) v2
Using the NIST Cyber Security Framework (CSF) v2 In this post, we’ll talk about using the NIST CSF v2, and show you that managing cyber security risk need not be like trying to juggle flaming chainsaws while riding a unicycle under the big top! We’ll explain how you can use the NIST CSF 2.0 to […]
Law Firms And Cyber Tech
Cyber security and law firms: Don’t just do it! For law firms, cyber security is rarely a problem that can be solved with a single product. Legal practices handle highly sensitive client data, confidential communications, financial records and high-stake legal matters, making them prime targets for cybercriminals. Of course, […]
TPSP AOCs save you money!
PCI DSS – A TPSP will save your money! All businesses that accept, process, store, or transmit cardholder data (CHD) must meet the requirements of the PCI DSS, and meeting those requirements requires merchants to address up to 251 controls across 12 requirements. This can be challenging enough […]
dotSec’s AOC saves you money!
DotSec’s AOC saves you money! PCI DSS compliance DotSec is a PCI DSS compliant service provider and we’ll use this blog post to look specifically at what service providers need to know to operate within the context of the PCI DSS. And even if PCI DSS is not relevant to you, you might like to […]
Relax! it’s not my first time!
Optus breached… who cares? Oh for heavens sake! Can we all agree that the Optus event doesn’t really matter? I mean, it really does matter, of course! But still, it kinda feels like deja view all over again [1] and I can’t help but think I should relax! It’s […]
Cyber insurance: A risky business
Cyber insurance:A risky business! As the frequency of cyber attacks increases and incident recovery becomes more expensive, it is important for businesses to have cyber insurance to reduce the potential losses associated with such events. In fact, such coverage is something we expect will become mandatory for all kinds of contracts and agreements in the […]
It’s in the trees! It’s coming!
It’s in the trees! It’s coming! * Since March, we’ve been very busy providing incident-response and recovery services for organisations that have fallen victim to cyber crime. During that time, we have observed: Similarities in the security services, infrastructure and practices that were in place before the target organisations were […]
Sophisticated, state-based actors?
Sophisticated, state-based cyber actors? Archive – June 2020 As you will be aware of by now, the Prime Minister warned Australians of “sophisticated, state-based cyber actors” targeting Australian organisations and all tiers of government. But is the sky really falling and if it is, will we all be equally devastated […]