Transcript Connect Smart Week 2014 - FGC

Cyber security – challenges and
opportunities for business
Business New Zealand AIG - 11 September 2014
Cyber risks are increasing
Source: NCSC 2013 Incident Summary
Targets
The main barrier to improving cyber security
behaviour is confusion
Q
Why don’t you take more steps to manage your cyber security?
I don't know what or who to trust
43%
I don't know what steps to take
33%
I find the language and content too
complicated
28%
I don't think it's important
8%
Don't know
15%
0%
20%
40%
60%
© Colmar Brunton | SLIDE 6
Connectsmart.govt.nz
SMEs
• Critical to NZ’s economy
– account for 97% of all enterprises in NZ
– employ around 30% of the working population
– generate more than a quarter (27.8%) of our GDP
• More SMEs taking advantage of the Internet
• Usually don’t have a dedicated IT person or department
• May rely on the internet to do business but may not have
the time nor expertise to understand security
• Higher risk tolerance
The use of technology in business
changes our risk landscape…
Technology is no longer simply a budget line or operational
issue—it is an enabler of virtually every strategy.
………..
Technological opportunities abound, but so do threats, including
cybersecurity risks, which will become the concern of a broader
group of executives as digitization touches every aspect of
corporate life.
McKinsey Quarterly – Sept 2014.
The problem we’re all facing…
The Rise of Technology = a
change in where data is
processed
H
2014
Apple iWatch
2010
Apple iPad
2008
Apple iPhone
1990-2000
Dot.com boom
L
2004
Facebook
1998
Time
The effectiveness
of traditional
security controls
– i.e. trust
Where should you focus?
People
•
•
“Top Down” security
helps build a strong
security posture
A positive “Security
Culture” works better
than a “policing”
approach
Process
•
•
Technology
Our staff handle
our data; Our
customers receive
our data; Our
partners process
our data
Have we told them
what’s acceptable
/ what’s not?
•
•
•
Implementing the
basics covers off 80%
of your risks.
Don’t let complexity
trip you up.
Don’t rely on big
brands – always
check they are
securing your data
So what can you do….SME TOOLKIT
Thank You
Connectsmart.govt.nz
Paul Ash
Director, National Cyber Policy Office, Department of Prime Minister & Cabinet
[email protected]
Matthew Lord
Head of Technology Governance and Risk, Kiwi Bank
[email protected]