Oz infosec pros more influential, risk averse

Powered by SC Magazine
 

A more cautious approach to cloud computing.

Australian security professionals are more risk averse to cloud computing than overseas counterparts, according to the Information Security Forum (ISF).

More of them also have the ear of chief executives and area respected point of contact for projects that carry implications for information risk management, claims ISF vice president Steve Durbin.

“A number of Australia organisations would love to be bold, but they want to know about the implications of jumping into cloud computing. They are not diving in like elsewhere,” he said.

The ISF claims to have Australia’s big banks, financial institutions, large retailers and some mining companies and government agencies as members.

On a visit to Australia from London, Durbin said a large retailer and ISF member had pulled large chunks of data from its saleforce.com system following requests from its information security team.

“The security guys saw lots of data, like buying habits and financial data, and said to pull data [in-house] that would not restrict business opportunities,” Durbin said.

“In Salesforce you can hold a massive amount of data in there. Do you need to hold it? It may be a risk.”

He said executives had become jittery of security breaches, and had set policies demanding projects with risk implications are first approved by IT security.

“Large Australian organisations get risk – they get it more than many other countries.”

That has forced security professionals “out of dark cupboards” and into a more high-profile business role, from a “traffic cop to strategic planner”, he said.

Copyright © SC Magazine, Australia


Oz infosec pros more influential, risk averse
 
 
 
Top Stories
Westpac interim CIO resigns
Group CIO yet to be appointed.
 
Earning the right to innovate
Breaking down the barriers to innovation is a long, but rewarding process, says Bank of Queensland Group CIO, Julie Bale.
 
A call for timely reporting
[Blog post] Businesses need incentives to keep customer data secure.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  27%
 
Application integration concerns
  3%
 
Security and compliance concerns
  29%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  5%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 877

Vote