Intelligent CISO Issue 33 | Page 35

It ’ s important that both the public and private sector work together towards a common goal to ensure we not only protect critical infrastructure and our sovereignty , but that we also continue to innovate and evolve security capabilities . particularly prevalent in the area of OT . CISOs and Security Operation Centres ( SOCs ) are more and more prevalent in enterprises and governments , but there are not yet any equivalent centres for OT or ICS networks .

PREDICTIVE
INTELLIGENCE

It ’ s important that both the public and private sector work together towards a common goal to ensure we not only protect critical infrastructure and our sovereignty , but that we also continue to innovate and evolve security capabilities . particularly prevalent in the area of OT . CISOs and Security Operation Centres ( SOCs ) are more and more prevalent in enterprises and governments , but there are not yet any equivalent centres for OT or ICS networks .

Leveraging this paper and its wider cyber initiatives , the government can provide education on the importance of training employees , creating roles and suggesting priority actions .
OT-specific cybersecurity training courses are available from AU $ 5,000 to AU $ 10,000 , which the government can easily facilitate or subsidise to enable greater access to professionals .
The ACSC currently has limited resources to help uplift cybersecurity maturity within critical infrastructure industries . Leveraging regularity compliance to build awareness and visibility for resources like ACSC will serve as a starting point to bridge the skills gap . It will also drive private sector industries to invest in developing adequately skilled people for these unique roles .
It ’ s important that both the public and private sector work together towards a common goal to ensure we not only protect critical infrastructure and our sovereignty , but that we also continue to innovate and evolve security capabilities .
The government is taking the right direction in reforming regulation and uplifting cybersecurity capabilities .
However , there are key considerations and challenges around the current state of critical infrastructure that should not be taken lightly .
For long-term success , critical infrastructure organisations must work with the government to dive deeper and develop a clear understanding of the different critical infrastructure sectors and the individual challenges they must overcome . As history has taught us , nation-state or for-profit attackers do not discriminate . u www . intelligentciso . com
35