The end of cybersecurity

Information security executive panel event report

Navigating the future of information security

Sydney, Australia - March 2025

The world is experiencing one cyber attack every 39 seconds*. The new reality for organisations is ‘when’ not ‘if’ they will face a data breach. In Australia, we have witnessed unprecedented levels of financial and reputational damage across industries and sectors, reshaping the future of some of Australia's best known brands, leading to regulatory reform.

As cyber threats escalate, regulations tighten, and digitisation accelerates, organisations must rethink their approach to information security. Aligning business and cyber risk strategies is a challenge that all parties must own. Finding a common language within organisations is often the best place to start.

This is the sentiment we heard from a panel of information security and data protection experts at our information security event in Sydney.

*IBM, Cost of a Data Breach Report, 2024

Watch to hear what cyber expert Chris Inglis said from our Sydney information security event

I would stop having conversations about 'cyber security' and start having conversations about what I want to do with my business and the dependencies that come from that. Digital infrastructure can then be aligned to those business objectives in the same way that we have always done for people, intellectual property, and strategy(ies). A conversation that starts with the business plan is a conversation that everyone understands.

Chris InglisFormer White House Cyber Czar and Deputy Director at the National Security Agency

Key take-a-ways from Chris Inglis and our expert panelists

Read now

Information security and data protection leaders call for action

InfoSec panel | Sydney, NSW

Industry leaders came together to discuss the urgent challenges facing Australian businesses. Key takeaways included:

Breaches are inevitable: Leaders need to shift focus beyond deterrence and protection to resilience, rapid response and recovery in order to thrive.
Cybersecurity as a business risk: Cybersecurity is not just an IT issue, it's a core business risk and a strategy that boards and CEOs must own.
Proactive approach: Move beyond compliance and adopt a proactive, risk-based approach. Regularly test cybersecurity plans.
Common governance and operational failures: Lack of understanding of digital dependency, failure to assign responsibility, and belief in perfect security.
Legal and regulatory landscape: Evolving laws and regulations require understanding of reporting obligations and potential legal consequences.
Human element: Most successful attacks exploit human vulnerabilities, highlighting the need for user education. Leaders must ensure employees are digital natives.