Data breach puts heat on new Optus infosec team

Optus’ massive data breach is providing a live test of a structure the carrier put in place last year in preparation for critical infrastructure laws.

Optus' Head of National and Cyber Security Ben Davies

An Optus spokesperson told iTnews its response to the breach is being handled by head of national and cyber security Ben Davies and CIO Mark Potter (to whom Davies reports).

Optus foreshadowed the creation of Davies’ role in April 2021, when Optus creates senior leadership role spanning national and cyber security ops.

iTnews learned the position was part of its response to the rollout of critical infrastructure security laws.

At the time, Optus told iTnews the head of national and cyber security role would “integrate and manage Optus’ existing national security and cyber security functions, design both policy and operational responses to comply with the new regulated regime, and integrate these into Optus and Group policies, procedures and practices.”

Davies joined Optus in October 2021 after more than nine years in enterprise technology roles with the Bank of England, including more than three years in cyber security positions.

Potter was appointed to the CIO role at the same time as Davies.

Missing from the response is chief information security officer (CISO) Dr Siva Sivasubramanian, who left the carrier in August after four years in the role, but who only updated his LinkedIn profile in the past couple of days.

“It is sad and shocking to know what has happened to Optus in the last few days, my heart bleeds for them.

"I have offered my services and support to the current cyber management team in this hour of crisis," Dr Sivasubramanian wrote.