
AU Info and Cyber Security News Last Week 2023-05-01

Commentary: Another week has gone, public holidays, no major breaches (still a few smaller breaches for me to document). With the extra free time I’ve rummaged through state government audit agencies sites looking for recent audits. I’ve added two from Western Australia and once from the best state Queensland. They are worth reading to remind us that independent audits are a valuable tool (ISO 27002 5.35 Independent review of information security).
It still annoys me that we still see employee cessation problems. Seriously it is not that hard, even with basic tools, processes, roles and responsibilities (I’m looking at you managers), with accountability measures.
Have a great Privacy Awareness Week. On that topic have a look at the Optus class action in the news.
Steve…K.

Australian government resists blanket WeChat ban despite restrictions by multiple departments
By Josh Taylor on Apr 28, 2023 The Australian government is resisting issuing a ban on WeChat on government devices despite many government departments instituting their own bans after the TikTok edict earlier this month. TikTok was banned from government devices in early April over data collection and security concerns connected …
Why Medibank is refusing to reveal the findings of its cyber attack review
By Anonymous on Apr 28, 2023 Key Points Medibank has refused to reveal findings of a review into a major cyber attack. • The cyber attack breached the private information of about 10 …
Slater and Gordon representing more than 100,000 participants in the Optus lawsuit | 7NEWS
By 7NEWS Australia on Apr 28, 2023 A landmark class action has been launched against Optus following last year’s massive data breach that saw the personal information of up to 10 million Austr…
AICD CSCRC Cyber Security Governance Principles
By Cyber Security Cooperative Research Centre on Apr 28, 2023 Set of Cyber Security Governance Principles, developed by the Australian Institute of Company directors (AICd) and the Cyber Security Cooperative research Ce…
Government set to reveal new plan to tackle scam problem | 9 News Australia
By 9 News Australia on Apr 28, 2023 A major federal government initiative is on the way to combat the alarming number of scam texts being sent to Australians. Subscribe and 🔔: http://9Soci.al/…
Home Affairs chief says cyberattacks threaten ‘everything, everywhere all at once’
By Rob Harris on Apr 28, 2023 London: Governments are struggling to keep pace with the global disruption caused by rapidly advancing cyberattacks, one of Australia’s most …
AI can fool voice recognition used to verify identity by Centrelink and Australian tax office
By Nick Evershed and Josh Taylor on Apr 28, 2023 A voice identification system used by the Australian government for millions of people has a serious security flaw, a Guardian Australia investigation has found. Centrelink and the Australian Taxation Office (ATO) both give people the option of using a “voiceprint”, along with other information, to …
Audit: Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems
By Steven Kirby on Apr 28, 2023 Queensland Audit Report 16 March 2023 Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems Only 33 per cent of …
Directors must shoulder responsibility for cyber security
By Josh Needs on Apr 28, 2023 HLB Mann Judd’s corporate advisory partner Katelyn Adams said cyber issues were a growing problem for boards everywhere. “Cyber security is …
Proposed Cyber Ransom Bans Predicted to Cause Catastrophic Damage
By K&L Gates on Apr 28, 2023 Cameron AbbottRob PulhamStephanie MayhewDadar Ahmadi-PirshahidJurisdiction: AustraliaType of Law: Communications, Media & InternetCriminal Law / …
1 in 5 Australians impacted by cyber-attacks, scams and breaches
By ABC Radio National on Apr 28, 2023 More than 1 in 5 Australians have been the victim of a cyber-attack, scam or data breach in the past 12 months. Despite this rate, only three in 10 of …
Business groups balk at tougher cyber rules for directors
By Joseph Brookes Senior Reporter on Apr 28, 2023 Australia’s business and employer groups have rejected proposals that would see them face tougher rules and more responsibility for cyber incidents, …
Ukraine ‘testing ground’ for Australian cyber defences
By Anonymous on Apr 28, 2023 Ukraine’s ambassador says cyber security assistance to help combat Russian aggression would also help boost Australia’s own capabilities. Vasyl …
Audit: Western Australia Auditor General’s State Government Information Systems Audit 2021-22
By Steven Kirby on Apr 27, 2023 West Australian State Government Audit Report 22 March 2023 Western Australia Auditor General’s State Government Information Systems Audit 2021-22 566 …
ACT Govt launches program to boost cyber workforce
By Anonymous on Apr 27, 2023 The ACT Government has launched a new program aimed at increasing the government’s cyber workforce by at least 100 people by next year. The CYNAPSE …
DSR can reform Defence capability procurement
By Anonymous on Apr 27, 2023 Macquarie Government says the Albanese government’s release of the public version of the Defence Strategic Review (DSR) is the strongest indication …
Gov to fund SMS sender ID register with $10m
By Ry Crozier on Apr 27, 2023 A government-run register of SMS sender IDs will go ahead courtesy of a $10 million commitment to be made in next month’s federal …
Audit: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses
By Steven Kirby on Apr 27, 2023 West Australian Councils Audit Report 29 March 2023 Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports …
AGL asks fed gov for stronger cyber security leadership
By Richard Chirgwin on Apr 27, 2023 The federal government needs to set a better example on cyber security – hardening its systems, achieving mandated maturity levels and sharing threat …
NSW Police’s first-ever CISO leaves
By Kate Weber on Apr 26, 2023 NSW Police’s first-ever chief information security officer (CISO) Michael Marsden is leaving the role after more than four-and-a-half years. The state …
Gov warned to tread carefully in cyber security review
By Richard Chirgwin on Apr 26, 2023 Australia’s privacy regulator is concerned that changes to cyber security regulation in Australia could undermine its ability to respond to privacy …
Australian Info and Cyber Security News Last Week 2023-04-24
By Steven Kirby on Apr 24, 2023 Reports from 18th April – 24th April Commentary: Interesting breach this week for TAFE SA where police in an unrelated investigation “found” a USB …
Small businesses at great risk of cyber security threats
By Chloe Potvin on Apr 24, 2023 The Australian Government has announced its national cyber security policy, committing $230 million for measures including the establishment of Joint