Daniel Pludek

Managed IT services offer local businesses in Canberra the advantage of quick response times, personalised service, and a deep understanding of the region's unique challenges. A local provider can offer tailored solutions that align with your business goals and be there if it’s all-hands-on-deck time to solve an immediate issue. These benefits can make a significant difference when IT issues arise. At Netier we pride ourselves on customer service. 99% of the calls you make to our service team are answered within 3 rings from someone in Australia! Our recent article highlights why choosing managed IT services in Canberra is a wise decision for any local business… https://hubs.ly/Q02SGMdF0 #ManagedITservices #Netier

11

The importance of a data governance strategy cannot be overstated - and the necessity for this to align with the cyber strategy is fundamental to ensure a solid cyber foundation is in place. If a cyber crisis hits, the need to understand what data is at risk must be addressed. #informationassets #datagovernance #cyber

4

Many thanks to 6PR Perth and Jamie Burnett for the kind invitation to discuss data breaches, ways to check if data has been stolen or leaked, job scams and the importance of understanding the powerful nature of data and be very mindful of digital footprint and online presence. Managing digital footprint is an ongoing process that requires vigilance, diligence and understanding of the digital world's dynamics and intricacies. It is about making sure that personal and professional data and information remain secure and private, minimizing exposure and breaches from cyberattacks and reducing vulnerability to these attacks. Swinburne University of Technology Swinburne Australian Graduate School of Entrepreneurship #databreaches #jobscams #dataleaks #cyberattacks #digitalfootprint #stolendata #onlinepresence #scams

5

1 Comment

Excellent guidance document which also covers how threat actors are often to easily elevate their privileges.

7

A few weeks ago, I posted about the Medisecure e-script exchange, which faced a major data breach. Patient and clinician data are now available to buy on the dark web. The company sought a government bailout due to having zero revenue after losing its duopoly e-script contract in Australia. Today, Medisecure has gone into administration. This situation raises critical issues about data security accountability. With the company winding up, who is responsible for safeguarding the personal and clinical information of the many Australians who used Medisecure’s e-script service? This quandary prompts a broader question being asked loudly: Will data security become a governance requirement for Australian businesses? Where will the lines be drawn? Interoperable electronic medical records drive better health outcomes in healthcare. However, achieving this requires a robust framework that protects data and provides fail-safes when companies close. How will we navigate this challenge? Who owns this responsibility? #DataSecurity #Healthcare #Escript #CyberSecurity #DataPrivacy #DigitalHealth #DataGovernance #HealthData #Medisecure #Australia

12

October 2024 Edition of the Australian Institute of Company Directors Magazine. #Cybersecurity ranks as the number-one concern for businesses, followed by financial, legal and regulatory risks, a new report has found. In partnership with YouGov, McGrathNicol surveyed more than 300 C-suite executives and board directors across Australian businesses with 50 or more employees. Cyber risk was a top-five concern for 2024 for 68 per cent of organisations, the highest of any risk category. The report found 71 per cent of organisations don't conduct due diligence on their key suppliers' cybersecurity practices, and over 75 per cent don't require mandatory reporting of cyber or data breaches affecting their suppliers. While 87 per cent of surveyed organisations were confident their business has a comprehensive insider risk management program in place, less than a third have implemented fundamental insider risk controls. Only 28 per cent use a risk-based vetting and due diligence framework for employees and suppliers or contractors, while only 27 per cent have education/awareness programs in place, and just 18 per cent have appointed an authority accountable for insider risk. BSI Learning #CybersecurityAwarenessMonth

13

3 Comments

📣 Stakeholder Share 📣 Australian Cyber Collaboration Centre in conjunction with the Office for Small and Family Business invite you to join a free virtual/in person workshop on 21 November to explore the Cyber Uplift Step Program (CUSP). You'll learn more about: • why it’s crucial to consider your cyber security measures and what you can do to strengthen and protect your business • key elements of safeguarding your business in the current cyber landscape • what the CUSP program has to offer Spaces are limited – sign up today and take the first step in securing your businesses cyber security: https://bit.ly/3YQUe7b

6

🌟 Elevating Digital Services with the Australian Government’s Digital Service Standards (DSS) 🌟 In today’s digital era, delivering exceptional government services requires adherence to robust standards. The Australian Government’s Digital Service Standards (DSS) are designed to ensure that digital services are user-centered, efficient, and inclusive. Here’s a look at the 13 key criteria that guide effective digital service delivery: Understand User Needs: Research and align with what users truly need. Have a Multidisciplinary Team: Assemble a team with diverse skills for comprehensive service development. Agile and User-Centered Process: Develop iteratively with a focus on user experience. Understand Tools and Systems: Integrate seamlessly with existing government systems. Provide a Consistent User Experience: Ensure a uniform and accessible design across platforms. Encourage Reuse: Leverage existing systems and components for efficiency. Ensure Privacy and Security: Safeguard user data and meet security standards. Make It Accessible: Design for inclusivity and accessibility for all users. Test the Service: Continuously test and refine based on user feedback. Measure Performance: Track key performance indicators and service effectiveness. Use Open Standards and Code: Implement open standards and share code to enhance transparency. Address Device and Platform Needs: Ensure functionality across various devices and platforms. Deliver Continuously: Maintain and improve the service post-launch based on user insights. By adhering to these criteria, we can create digital services that are not only functional but truly serve the needs of our diverse user base. Let’s commit to these standards and make government services more accessible and effective for everyone! 🌐✨ #DigitalTransformation #GovernmentServices #UserExperience #DigitalStandards #InclusiveDesign #AgileDevelopment https://lnkd.in/geffXHbB https://lnkd.in/gjF2nzvv

3

For the first time, CRN Australia and iTnews, which are read by decision makers in thousands of significant Australian organisations, will publish an index of Australian MSPs: https://lnkd.in/gdBhS_55 MSPs operating in Australia play a vital role managing business-critical IT, dealing with cybersecurity threats and helping millions of Australian organisations operate more productively and cost-effectively. These MSPs are a crucial part of Australia's IT industry and CRN Australia's audience, and work with decision makers that read iTnews. The CRN Australia MSP Index gives these MSPs an opportunity to: - Be listed in a directory of MSPs operating in Australia published by CRN Australia and our sister publication iTnews, publications read by many thousands of Australian IT and non-IT organisations - Provide data for a barometer of business maturity, opportunities and challenges in the Australian MSP landscape, to help their businesses, other MSPs and other IT providers, and others such as investors, business acquirers and MSP customers, better understand this landscape - Gain networking, information and thought leadership opportunities by being invited to MSP Index events in different states, and to other sponsored events relevant to MSPs. Eligible MSPs that apply to be listed in the MSP Index will be invited to the launch of the NSW Edition of the MSP Index in Sydney on 20th November 2024. MSPs throughout Australia can now apply to be listed in the MSP Index by completing the MSP Index survey: https://lnkd.in/gdBhS_55 #crnmspindex

31

1 Comment

#lowcodeforgovernment #playbookdownload Building secure, cost-effective citizen experiences with low-code application development (and process automation!) is critical for Queensland Government Departments looking to do more with less. Increased citizen expectations and increased cyber-threats reinforce the need to deliver these powerful customer experiences quickly. Download the Salesforce Low Code Playbook for Government and you'll discover our point of view on how to: ✅ Build responsive apps fast to solve any business problem ✅ Empower your teams to automate their own processes ✅ Create and manage a governance framework & build trust Leaning into a #lowcode #platform approach will increase efficiency, accelerate productivity, and realise cost savings across the program lifecycle. This in turn supports the public sector to create better experiences for your customers. https://lnkd.in/g__3qjq7

25

Technology program and project assurance. Was easy but.... ....please read the new DTA guidelines: https://lnkd.in/gxWwuT6n Do your own assurance? No longer. 'Outside' assurance required. Imprecise scope and deliverables? No longer. Plan activity, outputs, outcome and benefits....yes they are different ✅ Our SaaS tool simplifies against gateway/assurance reviews 😀 Let's talk: https://lnkd.in/g4Sxf_Rt

4

“It is AI practitioners like actuaries who will ultimately drive the success or failure of this regime, as they will be the ones asked to take action – building controls, procedures, checks and balances into AI systems as they are developed and deployed.” In an article for CEDA - Committee for Economic Development of Australia, Institute CEO Elayne Grace and 2022 Actuary of the Year Chris Dolman emphasise the importance of involving AI practitioners in shaping regulation. Advocating for a more nuanced regulatory framework, their article explains the key points in the Institute’s response to the Department of Industry, Science and Resources (DISR) proposals paper. Access the article here: https://lnkd.in/gyaB9WXt For a deeper dive, read the Institute's submission: https://lnkd.in/gxrx3ur8 #actuaries #AI #AIregulation #AIactuaries

19

1 Comment

The ongoing ransomware attack on Medisecure is a momentous event in Australia's cybersecurity landscape. This situation is particularly grave because it involves highly sensitive personal healthcare information, including medication treatments. The potential ramifications of this breach are far-reaching, affecting almost anyone who has ever had an e-script. For those who aren't aware, until recently, there were only two platforms in Australia handling electronic prescriptions, more commonly known as e-scripts. So, if you've had an e-script, it's more than likely that your health information and script information passed through the Medisecure platform. The hackers' demands are not public, and it is not known what information they have accessed, but it has the potential to be very damaging.  It highlights a situation I watched unfold recently that didn't make sense. It's only within the last 12 months that the government went from opening up the prescription script platform to bring a third player in to then rescinding its decision and going the other way, rationalising it down to one. I am trying to understand how the government would sponsor the creation of a monopoly on such a critical health service. I am aware that an issue is likely to be the sharing of limited government subsidies given to the Services. When shared across multiple organisations, the subsidy per organisation is diluted, diminishing the commercial benefit of running it. eRX is a division of Fred IT, which is a division of Telstra Health. I assumed it was a consequence of a lot of lobbying and dealmaking because it certainly doesn't seem in the public interest to rationalise and degrade competition for such a critical service. We now find ourselves living out in real time an example of what happens when such a significant platform with volumes of health information is decommissioned. Undoubtedly, Medisecure is held to a long list of compliance regulations and is losing the contract. I guess we should not be surprised that during the unwinding of such a major contract, the organisation was targeted by nefarious opportunistic hackers. I will watch with some anxiety how this plays out. I hope the best outcome is achieved for the benefit of everyone in Australia: that a small amount of data is breached, and that it is contained and not distributed against individuals and our community.  I anticipate some investigative journalism now occurring around the recent decisions regarding the electronic prescription platform, as the public may want to understand how this could have happened. https://lnkd.in/gTJyzPMc #HealthcareCybersecurity #DataPrivacy #RansomwareAwareness #ElectronicPrescriptions #33BONDI

3

1 Comment

Australian Information Security Association (AISA) #CyberCon2024 is approaching fast and I am excited to join an incredible lineup of distinguished security professionals and experts on variety of topics. Here are some sessions I’m particularly looking forward to: 1. Is security by design now the governance standard expected for company directors?, by Tony Vizza. 2. Cyber security meets Project Management: Why cyber risk management is achievable through better collaboration between the cyber security team and project managers, by Tony Vizza. 3. Building a Cyber Secure Future for Critical Infrastructure: Leveraging public-private collaboration to enhance cybersecurity resilience by, Darren Kane. 4. Generative AI powered information warfare: How to customize highly nuanced but convincing misinformation and disinformation, and how to mitigate them by, Dr. Tim McIntosh, CISSP, CIPP/E, PhD. 5. +Many more!

39

7 Comments

One in 200 Windows devices crash and show the dreaded Blue Screen of Death under normal use. That’s a lot. And it can mean lost time, money, even data. But around half of these crashes can be avoided if your business takes a few simple preventative steps. Here’s what I suggest… #Microsoft #BlueScreenOfDeath #ITManagement https://lnkd.in/d63YC_y8

1

CIOs and IT enterprise leaders across Australia and New Zealand are facing mounting challenges in an ever-evolving technology landscape. From prioritising investments in AI, cloud computing, and cybersecurity to effectively measuring and communicating ROI, IT leaders are tackling resource constraints and digital transformation head-on. The CIO Wave of Change Report™ uncovers how over 230 CIOs and IT leaders are navigating these complexities, offering insights into their key focuses, investment strategies, and digital priorities for sustainable growth. Explore Factor’s exclusive findings, available now on the Factor App: Play Store - https://lnkd.in/g_XwrMcF App Store - https://lnkd.in/guFbnpSy #Factor #CIOLeadership #DigitalTransformation #TechInvestment #SustainableGrowth

2

Did you know? The Australian Signals Directorate (ASD) have a number of recommended configurations for Cloud Solutions that any business can implement. Small business can use these to ensure protections and best practice configuration for your cloud solution, whether you have 1 user or 100! PECyber can support these configuration implementations or Implement them directly for you - Reach out today! #cybersecurity #securecloud #cyber #pecyber #australiancyber

3