Importance Of Cybersecurity In The Digital Age

The importance of cybersecurity in the digital age is usually argued from harm. There is a narrower argument that lands better with a board.

An organisation covered by Australian privacy law that suspects an eligible data breach has to assess it, and where serious harm is likely, notify the affected individuals and the regulator within a defined period. The clock starts on becoming aware, not on finishing the investigation.

That converts security from a technical preference into a set of obligations with timeframes attached, and it means the ability to detect an incident matters as much as the ability to prevent one.

An organisation that cannot tell whether data was accessed cannot make the assessment the scheme expects it to make.

The Office of the Australian Information Commissioner publishes the scheme. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s data breach response policy template and privacy training course.