itb-au logo
Story image

Companies caught between crooks and compliance - Centrify

12 Jun 2018

Businesses in Australia and New Zealand are increasingly squeezed between defeating cyber-attacks and complying with surging volumes of government regulation, cybersecurity company Centrify says. Centrify is concerned that complying with the increasing amount of red tape required to retain personal information may hamper the ability of a business to protect that customer information successfully. Already this year, Australian companies have seen the implementation of national Notifiable Data Breach legislation and the mandating of GDPR regulations for businesses with a presence in Europe.

In addition, the Australian Prudential Regulation Authority (APRA) is currently developing a new proposed cybersecurity standard, CPS 234, planned to take force from July next year to further strengthen the Australian financial system.

In April this year, the New Zealand Government announced plans to refresh its three-year-old Cyber Security Strategy. Centrify APAC sales senior director Niall King says regulatory protection of information privacy is completely commendable.

“The challenge that faces companies is they have to defend against cyberattacks while also having to comply with multiple regulations from diverse jurisdictions,” he says. “In an ideal world, these two activities would be aligned, but the reality is that while companies must jump through bureaucratic hoops to demonstrate their regulatory compliance, the bad guys don’t follow rules, so they keep on innovating to find new ways to get illicit access to private data. “The bottom line is that if companies want to keep the crooks out and comply with government regulations, they need to rethink how they approach cybersecurity by putting identity protection at the centre of their defences.”

King says that in many cases, hackers did not try to break in through corporate defences.

“The fact is, they use the path of least resistance by deploying our own weak credentials against us,” he says. “Reports show that 81% of data breaches exploit weak, default or stolen passwords. That means four out of five breaches occur through a failure in identity protection. “Centrify advocates a model of Zero Trust Security which assumes that every user - whether inside or outside the network - is a potential threat, so we verify every user, validate their devices, and limit their access and privilege to what is required to do their jobs,” he says.

“Centrify also uses machine learning to identify risky user behaviour and apply conditional access without impacting user experience. King says, “Securing identity while still making it easy for employees and partners to do their jobs is the key to delivering cybersecurity and regulatory compliance.”

Link image
Phishing campaigns show no sign of slowing down
Even though the 'phishing explosion' in March and April has passed, businesses and individuals are still at serious risk. The game has changed - make sure you're up to date and protected.More
Link image
A great ERP tool achieves a lot for your customers & financials
NetSuite’s cloud native SRP is not a project management tool that talks to your finance system. It's end-to-end project management capability for service professionals, integrated with NetSuite's full ERP solution. More
Link image
The SD-WAN trend that's changing the game for network service providers
Network service providers are increasingly challenged by established and new competition in the overlay SD-WAN management as well as in the underlay WAN transport.More
Download image
Mythbusting time: Security doesn't actually impede workforce productivity
Cybersecurity requires not only technology, but a security culture in your workforce. More
Link image
CX platforms: Critical to satisfaction, but what about the financial impact?
Create an ROI model that allows you to make quick wins and meet long term goals, ultimately bettering your business with premium customer experience.More
Link image
<span class="coloured">Microsoft 365</span>: More than just a collaboration tool for your remote workers
The world now knows the challenges of remote working in times of crisis. In this on-demand webinar, learn which migration strategy is right for you, and how to get there quickly and efficiently in this on-demand webinar by AvePoint specialists.More