Cyber experts urge proactive data protection strategies

With Data Privacy Day earlier this week, experts across the globe are drawing attention to the crucial importance of safeguarding personal and organisational data, amidst the expanding digital landscape. Prominent voices in the information technology sector have underscored the increasing sophistication of cyber threats and the need for both preventive and recovery measures as indispensable tools for contemporary cybersecurity strategies.

Renae Barber from Torrens University has reached out to highlight the expertise of Tony Jan, Head of Information Technology and Centre Director at Torrens University's Centre for Artificial Intelligence Research & Optimisation. Jan's expertise lies in providing essential guidelines on protecting personal and organisational data privacy. His insights could prove invaluable at a time when data privacy is under constant threat from ever-evolving cyber risks.

Bernard Montel, Technical Director and Security Strategist at Tenable, reflected on the vulnerabilities and opportunities brought about by generative AI. He observed that while data forms the backbone of organisations, breaches can result in significant trust issues and brand damage. He stressed the dual nature of AI in security, positing that while AI introduces new risks, it also holds the potential to revolutionise data utilisation by enhancing speed and efficacy in decision-making and threat detection. He warned of increasingly sophisticated ransomware attacks, with threat actors utilising AI to conceal their presence and deploy malware.

"Every organisation must take proactive measures to protect the critical data it holds," Montel stated. Emphasising foundational security practices, he advised organisations to identify their most valuable information and protect potential attack paths. He noted that simple steps can drastically contribute to overall security.

On the consumer front, Montel highlighted the pervasive nature of data collection, reminding individuals of the importance of being discerning about the personal information they share online. "Think before you click," he advised, underscoring the potential of openly shared public information to be exploited by cybercriminals.

Adding to the discussion on data resilience, Darren Thomson, Field CTO at Commvault, emphasised the changing landscape of cyber defence and recovery strategies needed by organisations. Thompson pointed out that mere defensive measures are not sufficient; rapid recovery processes are crucial to maintain business resilience in the event of a cyberattack. The concept of a "minimum viable company" is pivotal, where businesses ensure continuity of essential operations even when under attack.

With cybercriminal tactics becoming increasingly sophisticated, doing away with reliance solely on traditional backups is necessary. Thomson elaborated on modern recovery strategies that entail the use of cloud-based virtual cleanrooms, which enable malware-free recovery. These platforms allow for regular testing and adaptation, thus ensuring swift recovery capabilities.

"True cyber resilience," Thomson explained, "involves the ability not only to recover swiftly from a crisis but to do so in a manner that preserves operations and functionality." In this digital age, organisations that are prepared to implement these modern solutions can better manage and mitigate the risks posed by cyber threats.

The emphasis from cybersecurity experts on this Data Privacy Day is clear: as technology evolves, so too must the methods used to safeguard both personal and organisational data, employing innovative strategies that combine both prevention and rapid recovery.