David Begg

☁️"Domestic is not sovereign, nor is it necessarily safe." haunting words from Simon about what “sovereign” really means. Many assume that if servers are located in an Australian data centre, their data is both sovereign and safe, let me throw a curve ball to make it more complex. 📃Take a look at two U.S. laws: the USA PATRIOT Act (2001) and the U.S. CLOUD Act (2018), together, they give U.S. authorities sweeping powers to access data held by American companies (*cough* no matter where in the world that data sits, including Australia). ➡️Under the Patriot Act, agencies gained expanded surveillance rights to compel access to business and personal records in the name of national security. 🎯The Cloud Act takes that reach further, allowing the U.S. Government to demand data from U.S.-based providers, even if those servers are hosted here in Australia. ⚠️This means that although you may have a “secure” Azure, AWS, or Google instance located onshore, those environments are still bound by U.S. jurisdiction. Encryption helps, but how many organisations actually implement robust, end-to-end encryption and manage their keys 🔑independently? ✅Sovereignty aside, misconfiguration risk is already a major issue, here's some FACTS: - 27% of organisations report a public cloud breach according to SentinelOne. - Around 9% of cloud storage is publicly accessible, and 97% of that exposed data is sensitive according to Tenable - 21% of exposed S3 buckets contain sensitive data due to poor access controls. 🗺️So sure, location matters, BUT, legal jurisdiction and configuration controls matter more. Simply hosting workloads onshore doesn’t guarantee sovereignty or safety. What protects your business is a layered strategy: encryption, independent key management, rigorous configuration governance, continuous monitoring, and a complete understanding of the regulatory landscape you’re operating under. 👉 Don’t turn a blind eye by where your cloud is. Focus on who controls it, what laws apply, and how it’s secured. Need help in understanding your requirements, AND, securing your cloud environment? Why not reach out to the cloud and security experts at ASE Tech. #ShiftHappens #DataCentre #ThinkBeforeYouClick

108

20 Comments

Cyber security is no longer just a technical issue. It is a national priority. The Australian Competition and Consumer Commission is stepping into a broader role. One that includes oversight of Digital ID providers and leadership of the National Anti Scam Centre. This is not just about protecting consumers. It is about safeguarding the systems Australians rely on every day. To meet this challenge, the ACCC is undertaking a comprehensive cyber security uplift. The program is designed to strengthen internal systems, protect sensitive data, and build trust in the digital platforms that power everyday life. The uplift focuses on: • Alignment with the Australian Signals Directorate’s Essential Eight • Compliance with the Protective Security Policy Framework • Resilience against evolving digital threats • Readiness to support national infrastructure and citizen services This is not just about technology. It is about leadership, clarity, and protecting what matters most. Learn more about the ACCC’s cyber security uplift and what it means for Australia: https://hubs.la/Q03B3Vr00 #CyberResilience #DigitalTrust #EssentialEight #NationalSecurity #ManagedITServices #KMT #KMTChangingTheGame #HumanFaceOfTech #PeopleFirstTech

27

New Zealand headquartered Bastion Security Group has signed an agreement to merge with Perth-based cyber security managed services specialist Seamless Intelligence. https://lnkd.in/gFHh-Uq3 Bastion Security Group’s CEO, Eugene Gibney, said the Seamless Intelligence deal represented another important step in the company’s strategy to build a trans-Tasman cybersecurity powerhouse. “Seamless has earned a strong reputation for technical excellence and client trust, with a clear focus on making advanced cyber protection both accessible and tailored,” he said. Seamless CEO Christopher Bolan said joining forces with Bastion was a natural evolution.

45

Australia's Office of Home Affairs has released its request for submissions on Horizon 2 of the 2023-20230 Australian Cyber Security Strategy. The Strategy establishes a framework for the government to take action to enhance Australia’s cyber maturity and preparedness over three horizons, aiming to make Australia a world leader in cybersecurity by 2030. Our vision is for a world where all people, businesses, and governments understand the risks and dangers of cyber attacks and data theft and can protect themselves. We are on a mission to a safer digital world. As the Australian peak body for cyber security, we welcome this call for submissions. Read more here: https://zurl.co/gLaw1

38