The death of the questionnaire
Somewhere in your organisation this morning, a spreadsheet is on its way to a supplier who will spend the better part of a week answering three…
Read the article →RiskOps Explained: Why the Gap Between Risk and Resources Now Needs an Operating Function
The risk grows daily, and sometimes hourly. New exposure arrives with every system connected, every supplier onboarded, every acquisition absorbed, and every technique the attackers refine.…
Read the article →Why you will never read a breach story on this blog
There is a ritual that follows every breach that reaches the public. Within a day the coverage narrows from what happened to a single, sharper question,…
Read the article →The week cyber, physical and people became one problem
Somewhere in the noise of the last few weeks, the obligation sitting over Australia’s critical infrastructure quietly changed shape, and not many people seem to have…
Read the article →Tranche 2 Has Arrived: What Australia’s New AML Regime Asks of Professional Services Firms
For the first time since the regime was built in 2006, Australia’s anti-money-laundering and counter-terrorism-financing obligations now reach the professions. The Anti-Money Laundering and Counter-Terrorism Financing…
Read the article →The weight the CISO was never meant to carry
There is a particular kind of exhaustion that comes from a job where you are invisible when it goes well and the first name mentioned when…
Read the article →CPS 230 is live. The real test is whether you can prove your position.
For years, third-party risk has occupied an awkward spot on the register. It is one of the most common ways an organisation actually gets breached, and…
Read the article →