SEARCH
Industry suffers from ‘lack of proper education’ around cyber security
Industry suffers from ‘lack of proper education’ around cyber security
Financial advice practices should consider outsourcing their cyber security risks, a local CEO has advocated.
Virtual Business Partners head, David Carney, has called for better management of cyber security risks following May's landmark ruling against RI Advice which saw the Federal Court rule that the advice group failed to have adequate risk management systems to manage its cyber security risks.
According to ASIC, a “significant number” of cyber incidents occurred at authorised representatives of RI Advice between June 2014 and May 2020, including an incident where “an unknown malicious agent obtained, through a brute force attack, unauthorised access to an authorised representative’s file server from December 2017 to April 2018 before being detected, resulting in the potential compromise of confidential and sensitive personal information of several thousand clients and other persons”.
Mr Carney said the ruling has motivated licensees and insurers to “critically” examine their standards in a new opinion piece published on ifa.
“Whilst all advice businesses have professional indemnity (PI), very few have coverage specifically for cyber security. This is due to a lack of proper education by the industry around the issue. In addition, cyber security is currently not a requirement for corporate authorised representatives or PI insurers,” Mr Carney wrote.
“This is expected to change. If cyber security protection is not mandated, it should be considered best practice given the rate of attempted cyber attacks globally as infrastructure moves to digital storage via remote access.”
Mr Carney said practices should consider outsourcing as while most risk compliance managers understand what is required to manage threats, corporate governance frameworks offer “little insight” in how to execute a proper strategy.
He suggested this is because cyber security approaches take on by businesses can vary.
“As more practices shift to self-licensing, there is also a greater need for businesses to understand issues of governance, cyber security and sustainability as they are no longer outsourcing these competencies to a licensee,” Mr Carney wrote.
“Advice practices have no excuse to not implement cyber security into their governance framework. Not only will it provide the principal (and the team) peace of mind, but it will also give them assurance that they won’t be prone to data breaches and become the next whose licensee finds themselves on the wrong side of ASIC.”
Read the full opinion piece here.
Late last month, ASIC warned that failure to address cyber security could see company directors fall short of their regulatory obligations.
Commissioner Danielle Press said that the ruling against RI Advice should serve as a timely reminder for company directors about cyber security risk oversight and disclosure obligations.
“ASIC expects directors to ensure their organisation's risk management framework adequately addresses cyber security risk, and that controls are implemented to protect key assets and enhance cyber resilience. Failing to do so could cause you to fall foul of your regulatory obligations,” Mr Press said.
About the author
Neil is the Deputy Editor of the wealth titles, including ifa and InvestorDaily. Neil is also the host of the ifa show podcast.
Neil is the Deputy Editor of the wealth titles, including ifa and InvestorDaily. Neil is also the host of the ifa show podcast.
Subscribe to our Newsletter
We Translate Complicated Financial Jargon Into Easy-To-Understand Information For Australians
Your email address will be shared with nestegg and subject to our Privacy Policy
latest articles
OUR PLATFORMS AND BRANDS
- Accountants Daily
- Accounting Times
- Adviser Innovation
- Australian Aviation
- Broker Daily
- Cyber Daily
- Defence Connect
- Fintech Business
- HR Leader
- Independent Financial Adviser
- Investment Centre
- Investor Daily
- Lawyers Weekly
- Money Management
- Nestegg
- Property Buzz
- Real Estate Business
- Smart Property Investment
- SMSF Adviser
- Space Connect
- Super Review
- The Adviser
- Wellness Daily
- World of Aviation
EVENTS AND SUMMITS
- Accountants Daily 30 Under 30 Awards
- Adviser Innovation Summit
- Australian Accounting Awards
- Australian Aviation Awards
- Australian Broking Awards
- Australian Defence Industry Awards
- Australian Law Awards
- Australian Space Awards
- Australian Space Summit
- Better Business Summit & Awards
- Broker Daily Business Awards
- Corporate Counsel Summit & Awards
- Cyber Security Summit & Awards
- Defence Connect Budget Lunch
- Defence Connect DSR Summit
- Fund Manager of the Year Awards
- ifa Excellence Awards
- ifa Future Forum
- Investor Daily ESG Summit
- Lawyers Weekly 30 Under 30 Awards
- Lawyers Weekly Women in Law Forum
- New Broker Academy
- Partner of the Year Awards
- REB Awards
- Reinnovate
- SME Broker Bootcamp
- SMSF Adviser Technical Day
- Super Fund of the Year Awards
- Women in Finance Awards
- Women in Law Awards
- Accountants Daily Podcast Network
- Australian Aviation Podcast Network
- Broker Daily Podcast Network
- Defence Connect Podcast Network
- HR Leader Podcast Network
- REB Podcast Network
- Relative Return
- Space Connect Podcast
- The Adviser Podcast Network
- The ifa Show
- The Lawyers Weekly Show
- The Smart Property Investment Show
PODCASTS
LEARNING AND EDUCATION
MOMENTUM MARKETS NETWORK
LINKS
STAY CONNECTED
Subscribe to the Adviser Innovation eNewsletter.
