Commentary: Another week has gone, public holidays, no major breaches (still a few smaller breaches for me to document). With the extra free time I’ve rummaged through state government audit agencies sites looking for recent audits. I’ve added two from Western Australia and once from the best state Queensland. They are worth reading to remind us that independent audits are a valuable tool (ISO 27002 5.35 Independent review of information security).

It still annoys me that we still see employee cessation problems. Seriously it is not that hard, even with basic tools, processes, roles and responsibilities (I’m looking at you managers), with accountability measures.

Have a great Privacy Awareness Week. On that topic have a look at the Optus class action in the news.
Steve…K.

Australian government resists blanket WeChat ban despite restrictions by multiple departments

By Josh Taylor on Apr 28, 2023 The Australian government is resisting issuing a ban on WeChat on government devices despite many government departments instituting their own bans after the TikTok edict earlier this month. TikTok was banned from government devices in early April over data collection and security concerns connected …

Why Medibank is refusing to reveal the findings of its cyber attack review

By Anonymous on Apr 28, 2023 Key Points Medibank has refused to reveal findings of a review into a major cyber attack. • The cyber attack breached the private information of about 10 …

Slater and Gordon representing more than 100,000 participants in the Optus lawsuit | 7NEWS

By 7NEWS Australia on Apr 28, 2023 A landmark class action has been launched against Optus following last year’s massive data breach that saw the personal information of up to 10 million Austr…

AICD CSCRC Cyber Security Governance Principles

By Cyber Security Cooperative Research Centre on Apr 28, 2023 Set of Cyber Security Governance Principles, developed by the Australian Institute of Company directors (AICd) and the Cyber Security Cooperative research Ce…

Government set to reveal new plan to tackle scam problem | 9 News Australia

By 9 News Australia on Apr 28, 2023 A major federal government initiative is on the way to combat the alarming number of scam texts being sent to Australians. Subscribe and 🔔: http://9Soci.al/…

Home Affairs chief says cyberattacks threaten ‘everything, everywhere all at once’

By Rob Harris on Apr 28, 2023 London: Governments are struggling to keep pace with the global disruption caused by rapidly advancing cyberattacks, one of Australia’s most …

AI can fool voice recognition used to verify identity by Centrelink and Australian tax office

By Nick Evershed and Josh Taylor on Apr 28, 2023 A voice identification system used by the Australian government for millions of people has a serious security flaw, a Guardian Australia investigation has found. Centrelink and the Australian Taxation Office (ATO) both give people the option of using a “voiceprint”, along with other information, to …

Audit: Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems

By Steven Kirby on Apr 28, 2023 Queensland Audit Report 16 March 2023 Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems Only 33 per cent of …

Directors must shoulder responsibility for cyber security

By Josh Needs on Apr 28, 2023 HLB Mann Judd’s corporate advisory partner Katelyn Adams said cyber issues were a growing problem for boards everywhere. “Cyber security is …

Proposed Cyber Ransom Bans Predicted to Cause Catastrophic Damage

By K&L Gates on Apr 28, 2023 Cameron AbbottRob PulhamStephanie MayhewDadar Ahmadi-PirshahidJurisdiction: AustraliaType of Law: Communications, Media & InternetCriminal Law / …

1 in 5 Australians impacted by cyber-attacks, scams and breaches

By ABC Radio National on Apr 28, 2023 More than 1 in 5 Australians have been the victim of a cyber-attack, scam or data breach in the past 12 months. Despite this rate, only three in 10 of …

Business groups balk at tougher cyber rules for directors

By Joseph Brookes Senior Reporter on Apr 28, 2023 Australia’s business and employer groups have rejected proposals that would see them face tougher rules and more responsibility for cyber incidents, …

Ukraine ‘testing ground’ for Australian cyber defences

By Anonymous on Apr 28, 2023 Ukraine’s ambassador says cyber security assistance to help combat Russian aggression would also help boost Australia’s own capabilities. Vasyl …

Audit: Western Australia Auditor General’s State Government Information Systems Audit 2021-22

By Steven Kirby on Apr 27, 2023 West Australian State Government Audit Report 22 March 2023 Western Australia Auditor General’s State Government Information Systems Audit 2021-22 566 …

ACT Govt launches program to boost cyber workforce

By Anonymous on Apr 27, 2023 The ACT Government has launched a new program aimed at increasing the government’s cyber workforce by at least 100 people by next year. The CYNAPSE …

DSR can reform Defence capability procurement

By Anonymous on Apr 27, 2023 Macquarie Government says the Albanese government’s release of the public version of the Defence Strategic Review (DSR) is the strongest indication …

Gov to fund SMS sender ID register with $10m

By Ry Crozier on Apr 27, 2023 A government-run register of SMS sender IDs will go ahead courtesy of a $10 million commitment to be made in next month’s federal …

Audit: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses

By Steven Kirby on Apr 27, 2023 West Australian Councils Audit Report 29 March 2023 Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports …