Xavier Assouad

ICYMI ~ The Australian Department of Home Affairs' Protective Security Policy Framework (PSPF) Release 2024 introduces updated security policies, including third-party risk, foreign interference, and the security of operational and emerging technologies. The annual release cycle aims to "keep pace with new and emerging security threats." Key changes in PSPF Release 2024 include: • Expansion of the protective security domains to include separate domains for risk and technology • Incorporating requirements to address contemporary protective security threats including supply chain security, third-party risk management, foreign interference and security of operational or emerging technology • Improving the accessibility and structure of the PSPF • Providing clear guidance on areas with low maturity or ambiguity within the PSPF • Shifting from a maturity to compliance reporting model to provide more accurate reporting data and enable more valuable analysis of security vulnerabilities. The Australian Department of Home Affairs is also establishing a PSPF assurance function to assist government entities to accurately report their security posture, identify vulnerabilities and implement a process of continuous improvement to uplift the security maturity of the Australian Government. https://lnkd.in/gfhdVKje

38

1 Comment

The AICD and the Australian Information Security Association (AISA) have collaborated to assist directors of SMEs and NFPs to build foundational cyber resilience and strengthen their cyber security capabilities. With clear and concise recommendations for easy implementation, this new guide can be downloaded here: https://bit.ly/3V055eh #CyberGovernance #CyberSecurity

76

1 Comment

Very important handbook for securing your business. Specifically for SMBs.

1

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

1

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

2

#RiskManagement #Security #CriticalInfrastructure "It is not surprising that Australia’s telecommunications sector is still developing #resilience. Until now, the sector has lacked a well-defined framework for resilience, encompassing its regulatory scope and policy implications. Ambiguity results in inefficient resource allocation and missed opportunities for improvements. " "Telecommunications increasingly underpin interdependent critical sectors such as energy, finance, healthcare and transportation. Therefore, the consequences of ineffective policy and insufficient coordination ripple far beyond the industry itself, potentially impacting essential services and daily life for millions... " "By taking an all-hazards and sector-wide approach, this Profile has developed a framework to cement telecommunications' resilience in policy and operational practice. " "Assessed against the Sector Resilience Maturity Model, the Australian telecommunications sector is at the ‘Developing (2)’ level of resilience maturity. This level indicates that basic resilience measures are in place, including initial efforts to coordinate sector-wide." "Telecommunications networks have been particularly tested over the past five years. In response to a range of disruptions, individual network providers have displayed remarkable strengths to rapidly restore services, adapt to evolving challenges, and maintain essential connectivity for millions of users. One example is the extraordinary efforts to maintain effective services during the COVID-19 pandemic, when capacity limits were stretched as millions of Australians shifted their work into their homes." "Today, telecommunications connectivity underpins nearly every aspect of our lives, from personal communications to global commerce, healthcare, and national security. It connects communities, empowers businesses, and drives innovation. In 2020, the Australian Government classed the telecommunications sector as critical national infrastructure. This marked a significant shift in its governance and underscored its importance to the nation’s functioning, security, and prosperity." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement

7

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

#security #intelligence #riskmanagement "The New Zealand Security Intelligence Service (NZSIS) has released its annual Security Threat Environment report, with updated assessments on the nature of foreign interference, espionage and violent extremism in New Zealand. The second annual release of the report features more case studies to illustrate the current range of threats observed by the NZSIS. Director-General of Security Andrew Hampton said the release of last year’s unclassified report was a significant step in raising awareness, and this year’s edition goes even further. “Our independent assessment is about being as upfront as we can about the reality of national security threats facing our country. The point is not to alarm anyone but to alert New Zealanders to the threats so that we can work together to manage them,” he said. “In recent years there has been considerably more public discussion around topics such as foreign interference and violent extremism, which is why our annual assessment is so important. We aim to provide an upfront and factual basis to this ongoing national conversation.”" https://buff.ly/4efs7oA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

2

 Data localisation requires data to be stored and processed within a specific geographic location. The 2023 exposure draft Australian Digital ID Rules (Rules) previously required data in general to be processed and stored in Australia unless an exception applied. However, concerns were raised that data localisation would ‘impose significant operational and financial burdens’ and limit the ‘efficiency and scalability’ of the system. The localisation requirement has now been removed. Now that data localisation is unlikely to be featured in the final Rules, it is important for Australia to strengthen its data privacy laws to align itself with more mature data privacy schemes such as the EU’s General Data Protection Regulation (GDPR). Without stringent data protection, there is a real risk that Australian’s private information may be unduly breached by hostile actors.  Natasha Blycha James Myint Schellie-Jayne Price Ty Haberland Dorothy Sam

11

Join InfoTrust and our partner Armis on Tuesday 7th May as we share insights on securing your organisational assets. 🔒   Did you know that 40% of organisations’ assets are unmonitored? And Australian businesses report they are utilising 11 different tools on average to manage network-connected devices. It’s clear that the landscape of IT infrastructure and security is evolving rapidly.   During this online session, our team of security experts will delve into the complexities of managing and protecting organisational assets in today’s ever-expanding IT environments.   Register here: https://lnkd.in/grkR3yKR #cyberexposuremanagement #assetintelligence #assetsecurity

16

🚨 New Cyber Security Guidance for Critical Infrastructure 🚨 The Australian Signals Directorate (ASD) has just released an important new publication offering vital guidance for critical infrastructure organisations and their supply chains. This guide introduces the ASD Principles for Operational Technology (OT) Cyber Security – aimed at supporting leaders, developers, and stakeholders in making informed, secure decisions when assessing, designing, and managing OT systems. You can access the full principles here https://lnkd.in/g652RGhx. These principles are a key resource to strengthen your cyber security posture. 🔒 What you can do: Explore resources and tools to protect your critical infrastructure https://lnkd.in/gbsZ9Be3 #CyberSecurity #CriticalInfrastructure #OperationalTechnology #OT #ASD #CyberResilience #CyberGov #SecurityFirstMSP

2

Fast track your #CriticalTech from #WesternAustralia to the #USA through the inaugural 𝐆𝐥𝐨𝐛𝐚𝐥 𝐆𝐫𝐨𝐰𝐭𝐡 𝐀𝐜𝐜𝐞𝐥𝐞𝐫𝐚𝐭𝐨𝐫 𝐏𝐫𝐨𝐠𝐫𝐚𝐦: 𝐖𝐀 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐓𝐞𝐜𝐡 𝐭𝐨 𝐭𝐡𝐞 𝐔𝐧𝐢𝐭𝐞𝐝 𝐒𝐭𝐚𝐭𝐞𝐬 🌎 Does your #startup, #scaleup, or company offer capabilities for 𝐃𝐮𝐚𝐥-𝐔𝐬𝐞 🚀 application in #Robotics, #Cybersecurity, #AutonomousSystems, #RemoteSensing, #ResourceManagement, #Positioning, #BioTech, #AdvancedManufacturing & #MaterialsTech, #Quantum, #AI, #EnergyGeneration & #Storage? WA's, mining and energy sectors are #global leaders in developing #CriticalTechnologies and these have significant application in defence and space domains, making them ideal for #DualUse in the USA. Hosted by Invest and Trade Western Australia and supported by an #Investor-in-Residence, this hybrid program spans 3-months: 💡 Kick-off boot camp at West Tech Fest, Australia’s longest running tech and innovation event 💻 Virtual workshops led by US defence and technology leaders, tailored to accelerate entry into the US market 🤝 1 x virtual individual mentorship session with an industry expert; and ✈️ Participation in a customised business mission to Central Texas, which includes... 🌎 An immersive in-market business program during the South by Southwest (SXSW) 2025 conference in #Austin 𝘞𝘩𝘺 𝘊𝘳𝘪𝘵𝘪𝘤𝘢𝘭 𝘛𝘦𝘤𝘩 𝘵𝘰 𝘵𝘩𝘦 𝘜𝘚? US Focus on Localising Key Capabilities: The US is intensifying efforts to localise its #industrial base, clean #energy, #aerospace, and #defense technologies. This urgency is driving government, commercial, and investor sectors to seek ready-to deploy international solutions, particularly from allied nations.​ ​Central Texas as a Defense Innovation Hub: With Army Futures Command, a Department of Defense Innovation Unit (DIU) hub, an incredibly impactful innovation ecosystem, and a strong #space sector, #Austin has is a centre of gravity for #defence innovation​. ​Non-Dilutive Funding Opportunities: In 2024, the US #DIU allocated nearly US$1B in non-dilutive funding to scale critical tech that enhances national security​. ​#AUKUS Collaboration: The AUKUS security partnership amplifies the opportunity for WA tech to be scaled in both civilian and defence sectors, as the US seeks to bolster its critical tech base with allied contributions. We warmly encourage applications from #FirstNation #entrepreneurs and #businesses. EOI's close in 𝘵𝘸𝘰 𝘸𝘦𝘦𝘬𝘴 on Friday, 15 November! Don't miss this opportunity. Reach out to the team at the Department of Jobs, Tourism, Science and Innovation (Erin Jacobs; Alex Bertram 🌏; Kim Wiltshire; Krystal H.; Philippe Pierson; Dawn Grealish; Sonja Montague MacKay; James Yuen; Peta Arbuckle MVO) to discuss. Submit an application through the link https://lnkd.in/gsDZh-8p #WesternAustralia #InvestandTradeWA #CriticalTech #Innovation #UnitedStates #Austin #Texas #SXSW Government of Western Australia

51

1 Comment

Please complete the 5 min survey below: Aviation Technology Adoption in Bushfire Management FireTech Connect and Bushfire Research Centre of Excellence are undertaking a Australian Federal Government project to provide federal decision makers with a strategy for operational implementation and future research of emerging aviation technologies in support of bushfire prevention, preparedness, response and recovery. Project Objectives: 1. Identify extant operational use cases for drone technologies within fire services, the current capability gaps and barriers to future integration of emerging aviation technologies. 2. Development of potential future use cases for emerging aviation technologies in bushfire scenarios based on desktop information collation and stakeholder engagement. 3. Development of options for research priorities that would support development of future use cases and increased uptake of drone technologies by fire services. 4. Drafting of recommendations for policy makers to reduce the barriers that prevent fire services from using emerging aviation technologies within the Preparedness, Prevention, Response and Recovery phases of fire management. https://lnkd.in/gg7jUXrX AAUS - Australian Association for Uncrewed Systems Peregian Digital Hub #Fireairtraffic #UAV #RPAS #drones #airattack Chris Boden Kim Rawlings Noosa Council

10

2 Comments

SmartAIConnect is leading the way in responsible AI management by aligning with and exceeding the Australian Government newly announced voluntary AI guardrails. Their Responsible AI Framework, already integrated into their solutions, ensures clients can operate safely and transparently in high-risk environments such as video surveillance and AI-driven security. Key features include: • Real-time AI Monitoring: Immediate detection and removal of unauthorised AI models. • Comprehensive Compliance Tools: Automated reporting and real-time dashboards to maintain alignment with current and future regulations. • Scalability and Security: A robust platform designed for growth, adaptable to changing threats and regulations. As the government gears up for mandatory AI regulations next year, SmartAIConnect is equipping businesses with the necessary tools to navigate this evolving landscape. Their commitment to building trust ensures not only compliance but also responsible AI practices. More information: https://lnkd.in/gjKaq_iT #ResponsibleAI #AIGovernance #SmartAIConnect #AISecurity #AI

7

𝗦𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻𝗶𝗻𝗴 𝗔𝘂𝘀𝘁𝗿��𝗹𝗶𝗮'𝘀 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝘄𝗶𝘁𝗵 ASTRA 𝗮𝗻𝗱 𝗧𝗶𝗲𝗿 𝗦𝗜𝗫𝗧𝗘𝗘𝗡   As Australian companies face deadlines for required cyber security maturity and annual reports required by the Security of Critical Infrastructure (SOCI) Act, navigating compliance becomes crucial.    ASTRA and TIER SIXTEEN’s approach goes beyond basic compliance to build operational resilience. Spanning the domains of: + Governance and Policy + Security and Architecture + Asset Management we focus on addressing the evolving challenges of critical infrastructure security, ensuring sustained protection and resilience in an increasingly volatile environment.   🔗 Contact nikhil@astracyber.one today to see how we can support your journey in an interconnected and complex OT security and architectural landscape.   #CriticalInfrastructure #CyberResilience #SOCICompliance #CyberSecurity #GovernanceAndPolicy #OperationalTechnology #AssetManagement #AustralianInfrastructure #TechPartnership #ResilienceBuilding   Venkat Iyer Ian Wilson John Narayanan Rheinhardt Peens Clayton Duncan Stephen Toth Ross Parker

25