CYBER SECURITY
STATE OF THE MARKET EVEN WITH A BIG CYBER SECURITY BUDGET, YOUR BUSINESS WON’T BE ABLE TO PROTECT 100% OF ITS TECHNOLOGY ESTATE, 100% OF THE TIME.
Cyber attacks and data security breaches are a fact of modern coporate life.
Data breaches are a fact of modern corporate life. In today’s world, there’s no escaping from the fact that all organisations are at risk of a cyber-attack or data security breach. Although there is now a general acceptance among the business community that a cyber incident will happen at some point, it is how your organisation prepares and responds that is critical.
1% 1% 1%
4%
3%
3%
18%
5% Incidents involving Australian businesses in 2016
7% 7%
90% of organisations faced some form of attempted or successful cyber security compromise during the 2015-16 financial year
16%
8% 10%
15% Source: Australian Government, Australian Cyber Security Centre, ACSC 2016 Cyber Security Survey
Finance and insurance
Public safety
Professional, scientific and technical services
Education and training
Electricity, gas and water supply
Manufacturing
Information, media and telecommunications
Health care and social assistance
Transport and storage
Agriculture, forestry, fishing and hunting (1%) Rental, hiring and real estate services (1%) Administration and support services (1%)
Mining Retail trade
OUR APPROACH CORRS CYBER—WE PROVIDE CLIENTS WITH END-TO-END CYBER SECURITY SUPPORT. Our market-leading team of experts has a depth of knowledge that enables them to provide clear and targeted advice to clients on their cyber security needs. We have significant experience advising on and handling privacy breaches, and also bring together specialists in forensic evidence, investigations and inquiries that can give first hand advice on how law enforcement agencies approach and investigate cyber-crime. When a breach is known or suspected, our forensic IT team can help clients capture and analyse data, preserve vital evidence, identify what information has been accessed and determine whether the information is able to be captured. Our experience has shown us that businesses who have engaged with legal professionals before an incident occurs are able to coordinate a more effective response, significantly limit their financial and reputational damage, and recover faster.
OUR CYBER TEAM CAN HELP YOUR BUSINESS WITH: • Conducting data protection audits and impact assessments. • Developing and testing response plans, including reporting, privilege, fraud response and meeting the requirements of external notifications. • Co-ordinating and liaising with expert incident specialists in response to data breaches. • Investigating the misuse of intellectual property, fraud, extortions where demands are transmitted electronically, industrial espionage, website defacement and denial-of-service attacks. • Handling disputes and negotiations with regulators and external stakeholders affected by a data breach. • Advising on insurance coverage issues surrounding cyber risks and data security. We believe in a dynamic approach to cyber security and a collaboration between experts that can provide a unique, fullservice response team.
Businesses who engage with legal professionals before a cyber incident occurs are able to coordinate a more effective response.
CORRS CYBER – PREPARATION Assessing your data Every organisation uses data differently. We work with you to understand your particular situation, including what data you hold, why you collect it, how it is stored and who accesses it. We look not just at personal information you hold, but how you manage your own and third party corporate confidential information. We provide you with a full assessment of your particular privacy obligations, including any contractual and legal issues for third party data.
Offering practical assistance Our experienced Corrs Cyber team understands how data can be used in organisations and how to manage and mitigate the numerous risks associated with that. We can deliver specific, practical advice and assist managers and executives to put in place clear plans to comply with regulations and keep information secure. Our team can help you build your policies and plans around real life examples of how data can be accessed, leaked or stolen.
Developing a clear roadmap
Delivering a comprehensive cyber defence In addition to legal advice and forensic evidence management, it is very important that your organisation has a proven and tested cyber defence. Many sophisticated organisations already have cyber defence arrangements in place. Because we have worked with a wide range of experts in the cyber security field, we can either partner with your preferred provider or assist you to find a provider with the right expertise to meet your organisation’s risk levels.
Our experienced Corrs Cyber team understands how to manage and mitigate the numerous risks associated with data use.
We help you to identify risks and create a clear plan for response should a data breach occur or be suspected. We will keep you updated with any changes in laws or regulations that could affect your cyber response, meaning you will know in advance how your organisation should handle the response to a cyber attack or data breach and what legal, regulatory and contractual obligations you have to meet when doing so.
CORRS CYBER – RESPONSE Dealing with the initial stages of a breach When a breach is suspected or confirmed, we assist you to exercise your cyber plan in a way that maximises the legal protections available and help you to activate any applicable insurance. We work with your cyber defence team to minimise the loss of data where possible. We also work with your communications team and any external crisis communications consultants to plan the release of information in a way that protects your legal and insurance position.
Capturing evidence and understanding the issues Our forensic IT team can be on the ground quickly to capture and analyse any available evidence associated with a breach. If evidence is able to be captured, our analytics tools can help to locate evidence about what information has been the subject of theft or unauthorised access. We can also identify unusual download patterns and unorthodox access that can help identify the causes of and individuals behind the data breach.
Helping you manage your investigation and disclosure obligations From February 2018, companies will have 30 days to investigate an notify the Information Commissioner and affected individuals of a breach involving personal information. We assist you to comply with any compulsory disclosure obligations under the Privacy Act as well as any contractual obligations you have to clients and counter-parties. Our experience is that a well-managed investigation prevents the likelihood of action being taken by authorities and minimises the risks of complaints or disputes with clients and third parties.
Investigating and pursuing any wrongdoers Many breaches are caused by internal carelessness or intentional wrongdoing. Our forensic IT team will capture evidence, analyse user activity, prepare reports and give expert evidence if required. We investigate and prepare reports of any evidence that suggests internal wrongdoing. Where those acts are intentional, we can assist in appropriate disciplinary action, reporting any crimes to the police and taking civil action to recover loss.
Assisting you to learn from the incident We help you capture the lessons from the investigation and provide you with key learnings from the incident. We work with you to address these issues with your cyber defence consultants and also develop board and executive level presentations outlining what went wrong and the learnings from the breach, so they can address concerns with stakeholders. Finally, we adjust your roadmap and response plan and update training to take advantage of the learnings.
WWW.CORRS.COM.AU
SYDNEY 8 Chifley 8-12 Chifley Square Sydney NSW 2000 Tel +61 2 9210 6500 Fax +61 2 9210 6611 MELBOURNE 567 Collins Street Melbourne VIC 3000 Tel +61 3 9672 3000 Fax +61 3 9672 3010 BRISBANE ONE ONE ONE Eagle Street 111 Eagle Street Brisbane QLD 4000 Tel +61 7 3228 9333 Fax +61 7 3228 9444 PERTH Brookfield Place Tower 2 123 St George’s Terrace Perth WA 6000 Tel +61 8 9460 1666 Fax +61 8 9460 1667