<div dir="ltr"><div><div><div>I think the only remaining way forward is to enact heavy penalties for these incidents.<br><br></div>Industry self-regulation and codes of conduct have repeatedly failed. <br><br></div>I also fully understand that the Government has unwisely placed a requirement to collect and retain personal information, and on some levels poor policy put forward by security agencies has contributed to these terrible, predictable, outcomes. I'll also add that there is a similar lack of political accountability, so as an industry, we should be shouting at every opportunity that the Government required collection and retention of the data in the first place.<br><br></div><div>The large companies that have breaches are not typically failing because solutions are hard, its because of lack of corporate-level care. <br><br></div><div>Forcing Health and Safety obligations and penalties upon upper corporate management has seen business culture fundamentally change for the better. The same kind of legislation frameworks need to be introduced with regards to privacy.. .<br></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 27 Sept 2022 at 10:16, Bevan Slattery <<a href="mailto:bevan@slattery.net.au">bevan@slattery.net.au</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-6894081640955777858">
<div style="overflow-wrap: break-word;" lang="EN-AU">
<div class="m_-4579494074420250224WordSection1">
<p class="MsoNormal">Hi everyone,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Obviously a big week in telco and cybersecurity. As part of my work I am on the Australian Cyber Security Industry Advisory Committee as an industry representative.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am keen to look at opening up a dialogue with more and more telco, DC and Cloud CISO’s on what they are doing around this issue and looking to take a proactive step towards best practice on customer data and system security.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">There will be some pretty serious consequences of this hack on the industry and importantly we need to make sure we are as best placed to help each other continually increase in security posture through best practice, but also working with
each other as an industry.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Are people keen on having a online/VC session sometime in the next few weeks where like-minded industry participants get together and discuss security, retention, encryption, threat detection etc.? If so, just ping me directly and if there
is enough interest I will send out an invitation to the list for a call.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Cheers<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">[b]<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></blockquote></div>