KBKAST

In this episode of KBKast, we take a look into the recent announcement from the Australian government about their new cybersecurity regulations for businesses. The new risk management protocol covers cybersecurity, physical security, personnel security, and supply chain security, all aimed at encouraging companies to enhance overall protection measures rather than punishing directors for noncompliance. Marty points out that Australia’s situation with cybersecurity is similar to other countries in the world, with many governments implementing baseline standards to encourage better cybersecurity practices. However, some organizations have made progress in cybersecurity, while others need more government intervention to ensure critical infrastructure security. He also touches on the importance of investing in operational technology systems, including industrial control systems, which have been underinvested in cybersecurity, despite their vital role in operating electricity, gas, water, and transportation systems. As more governments require cybersecurity standards for these systems, both public and private sector organizations should invest in the security of these systems.

Marty Edwards is a globally recognised Operational Technology (OT) and Industrial Control System (ICS) cybersecurity expert who collaborates with industry, government and academia to raise awareness of the growing security risks impacting critical infrastructure and the need to take steps to mitigate them. As Vice President of Operational Technology Security at Tenable, Edwards works with government and industry leaders throughout the world to broaden understanding and implementation of people, process and technology solutions to reduce their overall cyber risk. Prior to joining Tenable in 2019, Edwards—a 30‐year industry veteran—served as the Global Director of Education at the International Society of Automation (ISA). While at ISA, he was recognized by his industry peers with the SANS ICS 2019 Lifetime Achievement Award. Prior to ISA, Edwards was the longest‐serving Director of the U.S. Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team (ICS‐CERT). Edwards also served as a program manager focused on control systems security at the Department of Energy’s (DOE’s) Idaho National Laboratory (INL) and has held a variety of roles in the instrumentation and automation fields. Edwards holds a diploma of technology in Process Control and Industrial Automation (Magna cum Laude) from the British Columbia Institute of Technology (BCIT), and in 2015 received the institute’s Distinguished Alumni Award. In 2016, Edwards was recognized by FCW in its “Federal 100 Awards” as being one of the top IT professionals in the U.S. federal government.

Gene Shablygin is a former nuclear physicist and current computer security storyteller. Life-long ham radio operator, relatively young (just under 1000 flight hours) private pilot. Loves classical live music, high-end audio, and fast cars from Zuffenhausen.

As a founder and CEO of WWPass, Gene is focused on freeing individuals and enterprises from ineffective, insecure password systems that can’t protect their data from increasingly sophisticated security threats.

Rik Ferguson is the Vice President of Security Intelligence at Forescout. He is also a Special Advisor to Europol’s European Cyber Crime Centre (EC3), a multi-award-winning producer and writer, and a Fellow of the Royal Society of Arts. In April 2011 Rik was inducted into the Infosecurity Hall of Fame. 

Rik is a researcher, storyteller, and futurist. He helps governments, law enforcement, businesses and individuals to understand the complexities of technology, and its intersection with cybercrime, contributing to global initiatives to combat cybercrime and reduce risk through participation at the United Nations, European and national Parliaments. 

Over his twenty-five plus years of professional practice, he has taken deep dives into the cybercriminal underground and helped the wider world understand the threats of today and how those threats might evolve over time.  

A recognised futurist and world-renowned speaker, Rik has spoken at global events including RSA Conference, Mobile World Congress, Milken Institute, RUSI, GITEX, Infosecurity, Virus Bulletin, e-Crime Congress, IPExpo, CloudExpo, Webit, GovSec, and many more, and is often quoted by media around the world. 

Rik joined Forescout in 2022. Prior to assuming his current role, he served as Vice President Security Research at Trend Micro for 15 years 

Rik Ferguson holds a Bachelor of Arts degree from the University of Wales and has qualified as a Certified Ethical Hacker (C|EH), Certified Information Systems Security Professional (CISSP) and an Information Systems Security Architecture Professional (ISSAP). 

Thomas Fikentscher is responsible for driving strong customer and partner engagement and expanding CyberArk’s emerging cloud business in the region.

Prior to joining CyberArk, Thomas was Chief Revenue Officer at JXT Global, and has more than 20 years’ experience in the IT industry, including significant stints at Oracle, Ingram Micro and Sun Microsystems. His extensive industry and leadership experience – particularly in the cloud domain – has been invaluable to CyberArk, helping grow demand for Identity Security solutions.

When it comes to cybersecurity, Thomas sees a significant opportunity to bridge the gap between technology jargon and business language. A big part of this is helping company leaders understand the importance of identity security to organisational risk management.

Mark Thomas, Director, Security Services, ANZ at Arctic Wolf, aims to build, direct and mature the operations of Arctic Wolf’s security services within the region. For the past 21 years, Mark has worked in the Cyber Security field establishing pragmatic, business-aligned risk minimisation strategies and cyber defenses to reduce losses, protect brand reputation, and achieve return on investment. Mark has held senior leadership and technical management roles, driving mission-critical SOC operations in geographically dispersed matrix environments, enabling greater business resilience and security agility. His previous roles include Senior Director, Threat Intelligence at NTT Ltd Global Threat Intelligence Centre (GTIC), and prior to that, Senior Director, Cybersecurity at Dimension Data.

See also: 2023 Arctic Wolf Labs Threat Report

Sean is the Regional chief security officer for Asia Pacific and Japan at Palo Alto Networks. In this role, Sean spearheads the development of thought leadership, threat intelligence and security best practices for the cybersecurity community and business executives. With more than 20 years of experience in the IT and security industry, he acts as a trusted advisor to organisations across the region and helping them improve their security postures and align security strategically with business initiatives.

Prior to joining Palo Alto Networks, he spent 15 years in a variety of roles at Intel Security (McAfee), with his last position as the Chief Technology Officer for Asia Pacific. Before this, Sean was involved in software development, technical support and consulting services for a range of Internet security solutions. Sean actively discusses security issues in mainstream media, including television, radio, print and security related broadcasts. He regularly participates in forums, conferences and panels, and provides intelligence on cybersecurity matters to the public and private sector.

Read the report here.

David Fairman is an experienced CIO/CSO/CISO, strategic advisor and investor.

David has extensive experience in the global financial services sector. David is currently the APAC CIO & CSO for Netskope helping customers manage their digital and cyber risk programs in addition to working across industry with the aim of making the digital economy a safer place to do business. Furthermore, David is a Partner and CISO-in-residence at SixThirty Ventures, driving innovation and helping build great technology companies.  Previously, David was the Chief Security Officer (CSO) at NAB owning all aspects of Physical Security, Fraud, Investigations and Cyber Security. Prior to NAB, he was the Group Chief Information Security Officer (CISO) for the Royal Bank of Canada. David has been a senior leader at JP Morgan Chase & Co and the Royal Bank of Scotland (RBS) having held several regional CISO and Global Head roles.

David has lived and worked in Australia, the UK, the Netherlands and the USA.

David was raised and educated in Australia where he received his Bachelor of Information Technology in Software Engineering and Computer Science. He holds a Masters of Business Administration and a Masters of Project Management. David began his career in Information Security while serving in the Royal Australian Air Force’s Electronic Warfare and Communications group, where he gained valuable experience in the technology, policy and process aspects of security and risk management.  Subsequently, David worked in a variety of roles in technology and cyber, including in the utilities sector (gas and electricity).

David holds a number of positions on boards of directors and was a founding member of the Security Advisor Alliance (www.securityadvisoralliance.org), and the Canadian Cyber Threat Exchange. During his tenure at NAB, David was the Chair for the Board of Directors for the Australian Financial Crimes Exchange and spear headed the formation of a taskforce involving the big 4 banks, AFP, ASD and ACSC to detect and disrupt cyber-crime impacting Australia. David also advises a number of VC funds and Cyber Security companies.

Recently, David was recognised in the Top 50 Australian Professionals, as profiled by the Top 100 Magazine. David has also been named as one of the Top 10 CISOs to know, and is recognised as a thought leader in the cyber security industry as profiled by K-Logix here.

David co-authored “Cyber Risk” (2016) and co-edited “Fintech: Growth and Deregulation” (2018) published by Risk Books and was the Technical Editor for “Zero Trust Journey Across The Digital Estate” (2022) published CRC Press.

David is passionate about education. He has held Adjunct Professorships at both the University of New York and the University of Toronto and is currently working with Deakin University in Australia.

David currently resides in both Melbourne and Brisbane, Australia.

Chief Technology Officer and Chief Information Security Officer

Kunal joined Imperva when Prevoty, a company he co-founded in 2013 and where he served as CTO, was acquired by Imperva in August 2018. Before joining Prevoty, he was the Director of Technology at BBC Worldwide. Kunal has a deep history of innovation and technical expertise, and has held roles leading security, data, technology, and engineering teams at Gravity, MySpace, and the NASA Jet Propulsion Lab.

He holds a BS from Babson College.

Riccardo Galbiati is the Chief Technology Office for Australia and New Zealand at Palo Alto Networks. With 15+ years of experience in the cyber-security industry, he is able to offer strategic advice to CISOs, CTOs and executives, especially when it comes to rationalising technology adoption and leveraging a Zero Trust approach that aims at business resilience in spite of cyber-attacks.