6 Takeaways from the AISA Perth Conference, 2019
At the AISA Perth Cyber Security Conference 2019 – 6 Takeaways, industry leaders showed how emerging threats, new tools, and best practices are reshaping how businesses stay secure. In this article, we share six key insights from the AISA Perth Cyber Security Conference 2019 that every IT and security leader should know. These takeaways cover risk management, cloud security, policy updates, incident response, cybersecurity frameworks, and evolving threat landscapes.
I have to say I really enjoyed the talks provided by Jeffrey Blatt (XVentures), Jacquline Jayne (KnowBe4) and Leonard Kleinman (RSA International) but my pick of the day was Phil Kernick’s (CQR) who’s engaging material and comedic asides reinforced the general theme that despite the abundance of Cyber Security tools, the prevalence of Cyber Security threats stems from us humans!
Having reflected on the day my 6 takeaways are as follows:
1. Skills Deficit
It’s not necessarily news but there is a major Cyber Security skills deficit globally and in Australia. According to Leonard Kleinman the global deficit is approximately 3m people globally of which 2.14m resides in the Asia Pacific region.
2. Mobile Phones
Your mobile phone is a key threat to the security of your personal data. But, given the propensity for people to use their phones for work, mobile phones also present a cyber security threat for business. Phil Kernick went on to provide these key messages:
- 73% of all malware exploits holes in mobile payments by sending fraudulent premium SMS messages – each generating US$10 in immediate profit.
- Android phones are far less secure than iPhones (Google Pixel 2 and above are OK).
- 77% of Android threats could be largely eliminated if the latest Operating System is applied.
- Make sure to apply operating system and application updates.
- Understand your privacy settings.
- Don’t use jail-broken phones.
3. Your people are your biggest threat
I have been advising clients of this for some time but the key threat to your business is not necessarily the technology but the people who work in your organisation. Jacqueline Jayne provided updated numbers:
- 90% of successful breaches start with a phishing attack.
- 60% of small businesses who experience a major cyber incident never recover.
- Most organisations don’t have an ongoing Cyber Security awareness program and only some include Cyber Training as part of their induction process.
4. Social Engineering
Jacqueline went on to explain that hackers aim to trick people into clicking by actively target the following human tendencies:
- Greed
- Curiosity
- Self Interest
- Urgency
- Fear
- Helpfulness
However, given we know social engineering is such a big threat it’s so surprising that despite the proliferation of ‘Cyber Tools’ organisations pay such little attention to staff training in these areas.
5. Why Cyber Awareness is Crucial
Phil Kernick expanded on the ‘human’ theme initiated by Jacqueline by emphasising that hackers use Psychology not Technology’ to attack. He explained that hackers attack people because hacking people is easier, cheaper and more successful.
I couldn’t agree more with this sentiment and hopefully we will see the narrative move towards people focused Cyber Security solutions.
6. RING Video Doorbells
Jeffrey Blatt (X Ventures) spoke about the Ring video doorbell and the advance in facial recognition discussing various use cases such as improving security, accepting parcels and even monitoring pets.
Given Jeffrey’s background in law enforcement, he eloquently covered the legal ramifications of the capabilities of these devices given the data captured by the end user or stored by the provider are not subjected to data protection laws. For example there is no provision for individuals to request:
- The data (images, dates, times etc) being held about them.
- The deletion of personal data.
However, the gap between the technology and legal precedent is only going to widen when, for example, the video doorbell is able to ‘see’ clearly into neighbouring windows.
Furthermore, the discussion also covered the prospect of an Orwellian state given possibility of law enforcement agencies being given access to this data.
About Cohesis
Cohesis specialises in helping organisations improve their Cyber Security posture through the appropriate use of tools, techniques and training. Our CyberSafe service is cost-effective and can be tailored to suit your needs.
For more information or to arrange a free risk assessment please call 1300 792 430 or email more@cohesis.com.au.
