Comments on: CIA offers information security plan to Australian CIOs https://istart.com.au/news-items/cia-offers-information-security-plan-australian-cios/ iStart keeping business informed on technology Mon, 15 Jun 2026 23:46:54 +0000 hourly 1 By: Andrew Bycroft https://istart.com.au/news-items/cia-offers-information-security-plan-australian-cios/#comment-23321 Tue, 13 Sep 2016 23:31:50 +0000 https://istart.com.au/?post_type=news-items&p=17435#comment-23321 Personally, I don’t think we should be promoting “security”. Security has connotations with prevention, and prevention is not always possible. In fact this is one of the reasons the cyber security industry is in a mess today. It has invested all of its efforts in prevention, and when that fails, detection, response and recovery are ill conceived and bungled, costing either taxpayers (for government cyber breaches) or shareholders (for private sector cyber breaches) money.

I think we should be promoting “resilience” which is the ability to have four shots at reducing cyber risk through:

1. discovery and remediation of vulnerabilities;
2. prediction and prevention of threats;
3. detection of, and response to, attacks; and
4. confirmation and recovery from breaches

Mindset and the cultural shift that will follow is what the plan needs to revolve around.

]]>