CISO Healthcare APAC
Connecting you to what's next in information security
22-23 November 2022
Online Event
The DevSecOps Shift Has Arrived
The way applications are developed, deployed, accessed and used has changed.
Infrastructures that were once contained and relatively straightforward to encircle with security measures have become complex and multi-cloud. Applications are now operationalised in tandem with their development, live online and are updated regularly and rapidly. Just as development has been modernised with DevOps practices, securing applications is undergoing a similar shift to become DevSecOps, with security decisions and processes now embedded into the development cycle.
This report examines the processes and best practices currently being used to evaluate the effectiveness of DevSecOps practices. Through insights gathered from cybersecurity leaders within organisations using DevSecOps approaches, we discuss how security leaders measure these programs and what considerations other CISOs and cyber leaders should make to improve security in DevOps.
Download your copy today!
Supply chains represent a considerable area of risk for organisations all over the world. From software to services, any engagement an organisation has with an outside party comes with risk that must be managed.
With large organisations participating in more supply chains than ever, and those relationships often being deep, the surface area for potential threats grows ever wider, with new conduits for cybercriminals to traverse and attack their targets.
Featuring insights from interviews and independent research, this report explores the way Australian security leaders consider and manage the cybersecurity risks through their chain of suppliers.
Download your copy of the full report today to find out more!
An increasingly hostile threat landscape demands that organisations balance incident detection and response methods with preventative measures.
The strategy of putting controls in place to mitigate potential threats before systems can be compromised has been described as “moving left”. It can also be described as “Left of Boom” cybersecurity, wherein the ‘boom’ represents an incident.
In this report, we sought to explore the extent to which cybersecurity leaders in Australia and New Zealand are responding to threats and attacks with preventative, Left of Boom measures.
We surveyed 100 cybersecurity leaders in the region and interviewed six cybersecurity leaders to understand the extent that such measures are being put into place, as well as the events they are trying to defend against the most.
Our findings suggest that ransomware remains one of the key threats that cybersecurity leaders are focused on. We also found that while some cybersecurity practices mix preventative and responsive measure, many strategies are skewed one way more than the other!
Download your copy of the full report today to find out more!
UniSuper Cyber Resilience Manager, Christie Wilson, shares thoughts on cutting through to non-security staff on information security
Senior information security leaders helm the important job of protecting organisations from cyber threats and risk. Increasingly, however, organisations are recognising they need to take a company-wide approach to security responsibility.
This has given rise to programs that educate and train non-cybersecurity staff to be more aware of the risk and threat landscape that exists. With it, come new roles and approaches.
Christie Wilson is Cyber Resilience Manager for UniSuper, a large Australian superannuation provider that boasts more than 450,000 members and more than $100 billion in funds management.
Wilson leads the initiative within the organisation to bring cybersecurity awareness to the staff, but says it’s more than just running training programs on security policy.
