SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
Story image
Security firm Cyber Toa launches virtual CISO for Kiwi businesses
Mon, 12th Jun 2017
FYI, this story is more than a year old

New Zealand businesses struggling to deal with the torrent of security threats now have help at hand - in the form of a virtual chief information security officer (vCISO).

Wellington-based security company Cyber Toa launched the vCISO last week, and chief executive Mandy Simpson says it's a tool for businesses to help concentrate resources to where they are needed most.

“To be honest, all indications are that cyber-crime is growing in New Zealand. Requests for assistance to the National Cyber Security Centre were up 66 percent in the year to April 2016 and global security provider Symantec put the cost of cyber-crime in New Zealand at $US200 million last year,” she says.

She says that security failures can cause not only financial losses but also reputational damage. In the case of personal data, if it gets stolen suddenly criminals have control.

“It's easy for companies to be overwhelmed with the number of things they must do to stay safe. While some companies can afford a full time chief information security officer (CISO) to deal with the growing risks, not every organisation has resources at their disposal. A virtual CISO allows companies to access our Cyber Toa expertise in a flexible way," she adds.

That vCISO will be able to help conduct a company-wide risk assessment, develop breach response plans and develop awareness programmes for employees.

“And of course, if an incident occurs, a virtual CISO can lead the response, including accessing our specialist team to help. We provide everything required for the virtual CISO to act quickly and protect the company," Simpson says.

Behind the scenes, Cyber Toa's technical team is responsible for the vCISO project.

“Our technical team is led by Tony Grasso, with decades of experience in the New Zealand intelligence community, and GCHQ. The virtual CISO service gives companies access to expertise that would be very difficult for them to directly employ,” Simpson concludes.