Tag: Risk Management

HomeArchives

Third-Party Risk Management: Lessons from the Origin Energy Data Incident

The moment customer data moves beyond your immediate operational environment, governance becomes more complex. Australian and New Zealand organisations routinely rely on external providers for customer service, technology operations, cloud platforms, and specialised business processes. Those arrangements may improve efficiency,...

Continue Reading  

ASIC Sues FIIG Securities for Cybersecurity Failures: A Wake-Up Call for Financial Institutions

In March 2025, the Australian Securities and Investments Commission (ASIC) initiated legal proceedings against FIIG Securities Limited (FIIG) for alleged systemic and prolonged cybersecurity failures. These failures reportedly led to a significant data breach, compromising the personal information of approximately...

Continue Reading  

FISCAL YEAR 2019 – RISK VULNERABILITY AND ASSESSMENT (RVA)

The Cybersecurity and Information Security Agency (CISA) has released a mapping analysis of 44 of its Risk and Vulnerability Assessments (RVAs) conducted in Fiscal Year 2019 to the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework. CISA has identified...

Continue Reading