Building cyber resilience in small and medium businesses

Introduction

-> Roadblocks for small/medium businesses implementing strong cyber security controls

• Resourcing, Knowledge, Time
• Jumping in before getting a lay of the land
• Roadblocks I've seen

-> Narrow the pathway/ creating roadmaps

• Achievable goals, and not overloading resources
• Government Assistance/Resources avaliable (IRP playbooks)
• Awareness

-> The power of leadership buy in

-> Governance Route

• ISMS

-> Technical Route

• E8 Maturity

-> Mixture

-> Experiences with Companies implementing stronger controls.

• What roadblocks we faced and how we walked overcame them.

-> Legal/Privacy Review

• Impact on small businesses with privacy act review