Key Points:
The ASIC report suggests that licensees regulated by
ASIC should be conducting a "health check" of their cyber
resilience.
The Australian Securities and Investments Commission
(ASIC) has released a report titled "Cyber
Resilience: Health Check".
The report recommends that regulated entities review and update
cyber-risk management practices. To assist in this process, ASIC
suggests a health check on "cyber resilience" which ASIC
defines as the ability to prepare for, respond to and recover from
a cyber attack.
"Effective cyber resilience requires initiative and a
commitment of resources to assess and develop appropriate
strategies, including planning responses to a cyber attack.
You should seize the opportunity to assess your threats and
vulnerabilities now, and understand where and how your
most valuable information is held. Through that assessment, you can
prioritise resources to mitigate the risk of being affected
disproportionately by a cyber
