Marco Figueroa – Senior Manager, Cyber Security, Risk and Compliance at Australian Institute of Company Directors, highlights his transition from technology to cyber security.
He emphasises the critical role of email as the primary threat vector for ransomware, stressing that a single click can open the gates to a cyber attack. Marco underscores the necessity for a transformed cyber security workforce profile, moving beyond technical expertise to a deeper understanding of attacker methodologies and thought processes.
He advocates for a round-the-clock, automated cyber security approach to combat evolving threats effectively, acknowledging the scarcity of cyber security talent and the need to use automation to bolster defences.
Organisations need clear incident response plans that acknowledge cyber attacks as inevitable and establish well-defined roles and responsibilities. Marco emphasises the need for open communication while adhering to established company protocols to avoid confusion during external communication, especially when dealing with media inquiries regarding cyber security incidents.
Marco’s insights shed light on the evolving cyber security landscape and the crucial strategies required to safeguard organisations from cyber threats.
Key Takeaways:
- The prevalent and significant cyber threat lies in email-based attacks, especially ransomware, where a single click can potentially breach an organisation’s security, emphasising the need for robust cyber security measures.
- The shortage of adequate cyber talent in Australia remains a critical challenge, necessitating a shift in cyber security workforce profiles towards a better understanding of attacker strategies.
- Using automation to strengthen defences is crucial, given the constant and worldwide presence of cyber threats.