Call us now:
The report for the Australian Governments Joint Committee of Public Accounts and Audit, highlights some challenges with cybersecurity compliance under the Governments Protective Security Policy Framework (PSPF). It sets out Australian governments protective security policy and supports entities achieve outcomes across security governance, information security, personnel security and physical security. The report highlights some of the cyber vulnerabilities that exist and challenges with addressing cyber hygiene.
The report makes clear Self Attestation and reporting disguises the true situation in relation to public sector cyber, through ‘optimism bias’, we are better than we really are. Recommending that the Australian government implement an assurance regime on agencies self reporting, and the Governments Attorney Generals department develop appropriate performance measures for cyber.
Under the PSPF the ‘Essential Eight’ cybersecurity strategies developed by the Australia Signals Directorate are defined. The report highlights several agencies failures to implement access management. One wonders, as with many national governments, how agencies will fair as more complex and time consuming cybersecuirty standards are required. Such as those recommended under the ASD cyber manual.(https://lnkd.in/eVsmCvUF).
As Ted Dziekanowski would say the shoemakers children have no shoes.
Stephen Pitt-Walker, JD, FGIA
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7085159300758675456