Main
Log in

Claire Pales

This email address is being protected from spambots. You need JavaScript enabled to view it.

Claire Pales is an IBRS advisor who specialises in Security and Risk. Claire is the best-selling author of the book “The Secure CIO”, a regular industry writer, a sought after speaker and an advocate for women in cyber. Claire is a mentor and coach to security professionals from graduates to C-level and is an active industry volunteer. Claire has more than 15 years experience in the security industry across fraud, paralegal, corporate security, cyber and information security. With a career that spans Asia Pacific including Australia, Hong Kong, China and India, Claire joins IBRS having led award-winning strategies and established multiple cyber security functions. Claire’s knowledge of cyber and information security is drawn both from formal qualifications and experience as a security leader spanning industries from critical infrastructure to online and ecommerce businesses.

Conclusion: The question of “how much security is enough” often stems from attempts to define ballpark security budgets, meet compliance obligations and scope out security team size and make-up. But how much security is enough depends on a number of factors that an organisation must consider before seeking the endorsement of the security strategy and agreeing on an acceptable risk position.


Register to read more...


Related Articles:

"Is security really an IT problem?" IBRS, 2018-08-01 08:53:13

"Sometimes good security does not mention security" IBRS, 2016-05-05 00:04:00

"Top 10 considerations when running an incident response drill" IBRS, 2018-09-04 13:29:16

Conclusion: There has been a lot of talk about incident response since the new data breach laws came into effect in Australia and Europe. But the laws alone should not be the driving force to having a response plan in place. Having a plan in place means more than talking about a plan, planning a plan and signing off on a plan. Being prepared puts you way ahead of the curve but being truly prepared means testing your incident response plan through drills and tabletop exercises. A drill provides an opportunity to understand realistic outcomes for risk scenarios and apply the lessons learned to your incident response efforts during a crisis.


Register to read more...


Related Articles:

"Cyber insurance – it’s not the cybers you’re insuring" IBRS, 2017-09-02 01:58:42

"Learning from the misfortune of others – the Equifax breach" IBRS, 2017-10-02 23:02:39

"Maersk and NotPetya – a case study on business impact and cyber risk management" IBRS, 2018-03-06 07:14:54

"Use the NIST cyber­security framework to drive for visibility" IBRS, 2018-06-01 04:19:32

Conclusion: If the broader business is to commit to investing in security, both emotionally and financially, they will need to buy into their responsibility. Security is likely to be seen as an IT problem because historically the minimum level of protection came through network and operating system security staff embedded deep in IT. Technical controls are not sufficient to protect an organisation from all known and potential threats as they are only as strong as the rules and configurations implemented by human operators. If nothing else, raising the profile of security to a broader audience with relevant, personalised messaging will begin to show the business how they can extract full value from security investments and dispel the belief that IT should solve the “security problem”.


Register to read more...


In the News

Managed security: a big gamble for Aussie IT providers - CRN - 02 August 2018

TechSci Research estimates the Australian managed security services (MSS) market will grow at a CAGR of more than 15 percent from 2018-23 as a result of the increased uptake of cloud computing and...
Read More...

Kids, Education and The Future of Work with Dr Joseph Sweeney - Potential Psychology - 25 July 2018

What is the future of work and how do we prepare our kids for it? Are schools and universities setting kids up for future success? Does technology in the classroom improve outcomes for kids? Should...
Read More...

PageUp starts rebuilding and looks to learn lessons after data breach nightmare - AFR - 27 June 2018

The timing couldn't have been worse for PageUp; two days before Europe's new data protection regime came into force the Melbourne-based online recruitment specialist's security systems detected...
Read More...

Australia is still in the cyber security dark ages - AFR - 28 June 2018

In terms of cyber security years, Australia is still in the dark ages, a period typified by a lack of records, and diminished understanding and learning. We're only a few months into practising...
Read More...

AMP does maths on infosec shortage - ITnews - 18th June 2018

Cyber security and risk advisor at analyst firm IBRS, James Turner, said the cyber skills shortage was prompting a wider rethink around the domain in terms of resourcing for the last few years....
Read More...

Subscribe to IBRS Updates

Invalid Input
Invalid Input
Please enter a valid email address
Please enter your mobile phone number
Invalid Input

Get in-context advice from our experts about your most pressing issues or areas of interest

Make an Inquiry

Sitemap

Already a subscriber?

Login to read your premium content.

        Forgot your password?
Recently Viewed Articles