Ritchie Theatre, UNSW Kensington Campus | Dec. 6, 2024
There is widespread recognition that cyber risk is a strategic business problem and not merely a technology problem causing inconvenience and delay in operations. Various high-profile incidents, including the recent CrowdStrike outage clearly demonstrated that cyber is a key business enabler and risk factor which must be managed effectively. This need for effective risk management is highlighted through the upcoming APRA CPS 230 standard for operational risk management. CPS 230 paragraph 25 mandates compliance with the APRA CPS 234 standard for cyber risk management. This coupling between these two standards confirms that cyber risk management is a business risk and not merely a technology problem.
In this meeting, the UNSW Business School, on behalf of the FAIR Institute Sydney Chapter, invited representatives from peak bodies in the Australian risk management communities to explore the gap in executive leadership education, skill sets that will equip cyber leaders to communicate and support senior business leaders and the board to manage cyber risk in a scalable and prudential manner.