How are you mitigating the biggest cyber-security risks in Australia?

Alan Herrity  | September 7, 2020

By Alan Herrity  | September 7, 2020 | Cyber Security

How are you mitigating the biggest cyber-security risks in Australia?
Australia’s new strategy, the risks, and the security measures your business need to make.

Cyber security is more crucial now than ever, as we consistently move everything we own – as businesses and individuals – online. On 6 August 2020, the Australian Government released Australia’s Cyber Security Strategy 2020, highlighting its investment and action plans to strengthen the protection of Australians, business and infrastructure.

At Momentum Search, our regular Virtual Round Tables are designed to bring expert advice and know-how to senior management and executives across Australia. On 13 August, as a key and vital part of Australian business, we set out to explore the new strategy with guest speaker Daniel Pludek. An experienced CIO with a keen interest in security, Daniel has over 20 years’ experience delivering over $300m worth of programs across risk, compliance, and technology, working with regulators across industries ranging from banking to energy.

Throughout the discussion, Daniel highlighted key issues with the strategy, uncovering that whilst the Government is correctly investing in this area, education remains as one of the best ways to combat threats. On the other hand, Daniel agreed this becomes more challenging and complex for larger organisations as the organisational change, training and embedment of new behaviours will take time, whilst cyber criminals are becoming more sophisticated every day.

What can we do within organisations to mitigate cyber security risks?

Our conversation also drew focus to the importance of having a minimum cyber security baseline for each organisation. In the discussion, a C-level attendee explained that the organisation he works for had gone too far with too many processes and controls, meaning employees would find it challenging to be compliant. Since, these measures have been reduced, still ensuring that they have the right processes and controls in place to be effective, while allowing employees to work as productively as possible.

Looking to the future, it is likely to be small and medium business that face some of the biggest challenges, as we come to understand how the Government intends to assist small and medium-sized organisations in uplifting their capability. Additionally, it will be key to observe how cyber criminals, both in Australia and abroad, are going to be caught and prosecuted.

At the round table, conversation shifted to an open debate around how to combat insider threat attacks, how to address the increase of DDoS attacks, the increased use of AI and ML, and where the weakest links in an organisation may be. The subject of Bug Bounty programs was also raised, with the key benefits these are bringing to organisations.

Key steps for businesses

To protect against cyber security risks, Daniel offered key suggestions of what companies can individually do. These include:

1.   Empower your business’ Chief Information Security Officer.
2.   Shift the focus away from tools to ensuring that you have the right information, processes, and approach to risks in place to secure your environment.
3.   Ensure that staff are vigilant and continuously trained/tested (Daniel is a big believer in using baiting to get a better level of understanding of your organisation).
4.   Begin Zero Trust Architecture where possible.
5.   Understand and value the importance of cyber security being embedded into your procedures, processes, and ways of working, rather than this being an audit item. This is not an IT problem; this is a corporate problem that we all need to address.

To find out more and download Daniel’s presentation in full, follow the link below.

Alan Herrity

December 15, 2025
Case Study - Multi-Hire Program Managers (x3)
By Alan Herrity December 11, 2025
The best steering committees never need to steer. When a major transformation program runs smoothly, this is not by accident. It is by design. Steering committees play a vital role in governance, visibility and key decision making. They exist to align projects & programs with business strategy, oversee delivery, resolve major issues, and make the high-level decisions that shape direction and investment. When they work well, they give leaders confidence that complex initiatives are under control and moving towards their intended outcomes. My view is that the most effective steering committees are often those with the least fuss. They don’t spend their time firefighting or unpicking surprises. This is not the intent of a steering committee. The focus is on validating progress, endorsing key decisions, and providing strategic guidance — because the real work has already been done. The program leader’s real art The difference lies in the quality of program leadership. The hard work is done in the lead up to the steering committee, this means: Alignment. Stakeholders are engaged early, with shared understanding of priorities, scope, and success measures. Anticipation. Issues are surfaced and resolved at working level, rather than escalating unnecessarily. Knowing when to escalate to remove roadblocks is key to success. Clarity. The project/program narrative is consistent, transparent, and grounded in evidence — so there are no surprises. When these fundamentals are in place, the steering committee becomes what it was always intended to be: a forum for strategic direction, not operational repair and firefighting. Governance at its best A well-run steering committee confirms that the ship’s on course, the crew is competent, and the captain has control. The conversation becomes higher value — focused on trade-offs, strategic risks, and emerging opportunities rather than tactical blockers. That’s governance at its best: fit for purpose and effective, challenging but supportive. What it says about leadership Program leaders who reach this level of maturity focus on alignment, clarity, and trust. They create an environment where the steering committee’s confidence is earned, not requested. When a steering committee spends its time on decisions rather than disagreements, you know the program is being led — not just managed. Please contact Alan Herrity to explore this topic further.
By Alan Herrity November 25, 2025
A conversation with an executive recently reframed something many boards are still grappling with. The real blind spot in boardrooms isn’t just a lack of technical understanding. It’s the confidence to interpret technology investments through a strategic lens — how they enable the business, improve risk, and ultimately strengthen customer experience. If a board sees a $50 million cloud program purely as IT infrastructure, the conversation is already heading in the wrong direction. The strategic case for technology is, in effect, the case for digital transformation. That means understanding how the change reshapes process performance, customer visibility, and operational resilience. As that executive put it, a true digital transformation “exposes your process performance to your customers.” It’s a useful test: if your customers could see exactly how your processes work, would they still choose you? That’s the difference between technology as cost and technology as capability. Technology Fluency Isn’t About Technical Depth Boards don’t need more technologists. They need directors who can recognise what technology enables — growth, speed, resilience, and transparency. That has always been the requirement. The gap today is that these decisions now sit at the centre of strategy rather than the periphery. Digitally fluent boards Link investment to strategy, not infrastructure Differentiate between modernisation and transformation Understand customer impact as clearly as cost impact Assess risk in operational, cultural, and technology terms Where boards struggle is usually not with the technology itself, but with context. They miss how decisions play out culturally — the hidden signals in execution that determine whether a transformation will land. As one executive in my network put it, “the distance between the board and where the work happens means cultural signals get lost.” His view is right; culture remains one of the quietest destroyers of transformation success. The Strategic Value of Technology Leaders on Boards This is where experienced Technology Executives add real value. However, not as technical custodians. The strongest candidates position themselves as enablers of strategy, stewards of risk, and commercial contributors who can translate complexity into clarity. They can articulate why a transformation matters, how it links to the operating model, and what the organisation needs to do to ensure customers feel the benefit. They don’t talk about platforms first; they talk about outcomes. The best ones move comfortably between strategy, execution and culture. They can explain the positive impact on the P&L in ways that resonate with non-technical colleagues. That’s what differentiates a board-ready technology leader from one who’s simply senior in their function. Boards Need to Close Their Own Blind Spots Technology Executives bring essential perspective, but the responsibility doesn’t sit with them alone. Boards need to identify where their blind spots are — whether that’s digital capability, data literacy, transformation oversight, or cultural interpretation — and close them. A digitally fluent board isn’t one with a single expert. It’s one in which the full group can challenge assumptions, interrogate investment cases, and understand how transformation affects customers, risk, and strategy. When they do lead a major transformation, the job isn’t finished when the program ends. The most effective boards review, assess, and learn. Continuous change means there’s no moment for relief. If a board feels the work is “done”, that’s usually the signal that it’s time to evolve again. What This Means for Technology Executives Preparing for Board Roles For leaders aiming to step into governance roles, the expectation has shifted. Position yourself as someone who: Enables strategy, rather than represents a function Understands risk in operational and technology terms Can show a clear link between transformation and commercial outcomes Brings the cultural awareness to read execution signals early Boards don’t need technologists. They need technology-literate strategists with the experience to make change investable and the judgement to ensure it succeeds. Closing the Gap Business models, customer expectations, and technology capability will continue to move at pace. The organisations that thrive will be those whose boards understand how technology shapes value — not as a technical discipline, but as a strategic one. For many boards, that shift is still underway. For Technology Executives, it’s a clear opening to contribute where the business needs clarity most. If both sides step towards each other, the blind spot closes.  Please contact Alan Herrity to explore this topic further.
By Alan Herrity November 11, 2025
The Quiet Crossroads Every Transformation Leader Reaches You’ve been offered a lateral move. You might feel that it’s a step back. Your mentor says take it. You’re torn. That tension — perceived progress versus pragmatism — is one I see often. Recently, a CIO I know asked me about the pros and cons of a sideways step. On paper, it can look like a setback. In reality, it can set the stage for the next big leap. “Careers aren’t ladders anymore. They’re landscapes - and the best leaders learn to navigate them". Four Real Ways Careers Move Forward Careers rarely move in straight lines. In truth, there are four ways to grow — each valid in its own season.
By Alan Herrity November 10, 2025
Case Study - General Manager - IT Project Services
By Alan Herrity November 10, 2025
Case Study - General Manager, Transformation & Enterprise Project Management Office (EPMO)
By Alan Herrity November 10, 2025
Case Study - Head of Transformation
By Shazamme System User October 24, 2025
Case Study - Program Director – Confidential Initiative
Two businessmen discussing ideas with light bulbs symbolizing innovation and strategy
By Alan Herrity August 21, 2025
Recently, I had lunch with a Senior Transformation Executive who'd been a candidate in a Momentum Search and Selection-led search late last year. While he didn’t land that particular role, we stayed in touch and often discussed different opportunities. Today, he’s thriving in a new opportunity — and he credited some of our conversations as a key part of his journey.
Professionals building personal branding strategies and networking for career growth
By Alan Herrity August 21, 2025
Back in 1997, McKinsey coined the phrase 'The War for Talent'. That war hasn’t gone away—however, it has evolved. In today’s digital world dominated by smartphones, platforms like LinkedIn, and an endless stream of content. With many of the candidates I represent, it increasingly feels like we’re in a war for personal branding.