In New Zealand, Hacking Is A Serious Business

The concerns of New Zealand's leading chief executives vary but if there is anything close to a consensus, it is that cybersecurity is major one. 

On a scale of one (equaling no concern) to 10 (extreme concern) respondents to the Mood of the Boardroom survey rated cybersecurity 7.16/10 out of a list of 16 international factors.

To underline the scale of their concern, almost twice as many chief executives rated cybersecurity at 9/10 or 10/10 as they did the next most concerning issue, the outcome of the November 8 US presidential election.

Scott Bartlett, CEO of Kordia, the Government's broadcast and telecommunications network operator, believes we need to get serious about the threat posed by cybersecurity vulnerabilities. "As a country, we are immature when it comes to understanding and coping with the risks associated with cybersecurity," he said. He ranks it as one of the top three issues facing the nation.

Though acknowledgement of the risks may not be as widespread as it could be, it is certainly at the forefront of the minds of many New Zealand business leaders. "Seeing that our technology is robust from cyber-attacks is a key priority," said Cathy Quinn, chair of Minter Ellison Rudd Watts. "Failure to successfully manage this risk has the potential to fundamentally threaten the viability of our business.

"Cybersecurity is something we take seriously and we are grateful for the quality of the team we have who are focused on preventing attacks and responding to cyber threats."

Facilitating that response can sometimes mean internal and external frustrations, such as when email might be blocked because it appears suspicious to firewalls.

But that's a cost Quinn sees as well worth bearing: "We trust, though, that our people and clients will accept the occasional frustration given that the objective is to protect confidential client and business information."

When asked for their business priorities for the year ahead, many other executives also pointed to addressing cybersecurity risks. A retail sector CEO identified "enhancing the risk environments across the business, especially cyber risk," as a major focus. Z Energy CEO Mike Bennetts ranked risk management as a key priority -- two examples of the diversity of risks on his radar were cyber security and climate change.

The fact that cybersecurity now ranks alongside what have long been seen as the world's greatest challenges is telling. A real estate director said, "Both terrorism and cybersecurity are always cause for concern of the highest level, as we do not know when and where it will next hit."

In light of the increasing acknowledgement of the risk, there are opportunities for the businesses that help address it. Kordia acquired Aura Information Security, a leading cybersecurity company, for just over $10m in late 2015.

Bartlett sees addressing cybersecurity threats as a potential selling point for New Zealand.

"We are small enough to make our little country a stand-out example of how to get it right," he said. "If we can, our cyber-safe brand will be as important as, and more credible than, 100 per cent Pure New Zealand."

According to a report cited in the Government's National Plan to Address Cybercrime, released in 2015, the annual cost of cybercrime to the global economy has been estimated at US$400 billion.

Notable examples of cyber-attacks in recent times include the 2015 server breach of VTech, a children's toy manufacturer, and Anthem, a health insurance company.

The former resulted in the theft of 4.8 million parents' records, and over 6.8 million children's records. The hack on Anthem saw almost 80 million personal health records exposed.

After Sony was the victim of a well-publicised hack in 2014, thought to be linked to North Korea, the company had to put aside US$15m in the following quarter alone to beef up its cybersecurity systems. Some estimates suggested the true cost of the hack may have been closer to US$100m.

With fallout like that, it's little wonder that New Zealand's CEOs are beginning to take note.

NZ Herald:          Insurance & Cyber Vulnerability - Get Your Report for 2016
 

« Surprise: FBI Say US Political Hacks ‘Probably Was Russia’
Cyber Terrorism Keeps At Least One Top FBI Agent Awake At Night »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

QATestLab

QATestLab

QATestLab is a leading International software testing company offering a full range of software testing services including security testing.

GTB Technologies

GTB Technologies

GTB Technologies is a cyber security company that focuses on providing enterprise class data protection and data loss prevention solutions.

S2 Grupo

S2 Grupo

S2 Grupo is the benchmark company in Europe and Latin America, for Cyber Intelligence and mission critical systems operations.

Perception Point

Perception Point

Perception Point is a Prevention-as-a-Service company, built to enable digital transformation. Our platform offers 360-degree protection against any type of content-based attack.

HvS Consulting

HvS Consulting

HvS Consulting is a specialist information security company offering a full range of services including IT security architecture, ISO 27001 audits, Pentesting, Security monitoring and Training.

SysTools

SysTools

SysTools provides a range of services including data recovery, digital forensics, and cloud backup solutions.

Cimcor

Cimcor

Cimcor’s flagship software product, CimTrak, helps organizations to monitor and protect a wide range of physical, network and virtual IT assets in real-time.

Digiserve

Digiserve

Digiserve by Telkom Indonesia is an end-to-end managed solutions provider committed to empowering enterprises in Indonesia.

PeopleSec

PeopleSec

PeopleSec specializes in the human element of cybersecurity with a comprehensive set of services designed to maximize your security by educating your workforce as a whole.

Cybriant

Cybriant

Cybriant Strategic Security Services provide a framework for architecting, constructing, and maintaining a secure business with policy and performance alignment.

Phy-Cy.X Security Group

Phy-Cy.X Security Group

Phy-Cy.X specialize in the “Physics” of Information Security through both physical and cyber domains. We are not an IT company, we ARE an Information Security company.

Hybrid Identity Protection Conference (HIP)

Hybrid Identity Protection Conference (HIP)

Hybrid Identity Protection (HIP) is the premier educational forum for identity-centric cybersecurity practitioners charged with defending hybrid cloud environments.

New Relic

New Relic

After inventing application performance monitoring (APM), New Relic stands at the forefront of observability with the most advanced platform for eliminating digital interruptions.

CyberNINES

CyberNINES

CyberNINES is a business specializing in helping US Department of Defense contractors become compliant and attest to federal cybersecurity regulation requirements.

Tuskira

Tuskira

Tuskira is a Preemptive Cyber Defense & Response Platform powered by Agentic AI, designed to go beyond traditional vulnerability management.

Staris

Staris

Human based defense is dead. Staris is reinventing application security for an increasingly AI driven world.