Cross Examining Cyber:
Conversations on Cyber Law

Part 1

In this episode, Cam is joined by Kaman Tsoi, one of the country’s most experienced and respected privacy lawyers. Together they cross-examine Privacy Commissioner Carly Kind.

Commissioner Kind takes on her first role in the public sector (at the OAIC). She had a successful career working in human rights law with the UN (spending time in Geneva, New York and London) and then moved into privacy (and the intersection of human rights with technology). She has worked on strategic litigation and privacy policy advice. She is the founding director of the Ada Lovelace Foundation.

In today’s podcast we talk about the privacy reform agenda, the role of the regulator in strategic enforcement and the efficacy of the notifiable data breach regime.

Commissioner Kind is an impressive individual, who brings a very practical approach to the role.

Part 2

In this episode, Cam is again joined by Kaman Tsoi and, together, they continue the cross-examination of Privacy Commissioner Carly Kind.

In this podcast, we talk about the role of the board, the OAIC’s enforcement approach and the Cyber Security Strategy, including the Commissioner’s view on the extortion demand ‘conundrum’. Commissioner Kind also offers some wise words on what it takes to be a good lawyer in the cyber space…courageous!

Commissioner Kind is a very impressive individual. She brings a very pragmatic perspective to the role and her personality is coming through in the OAIC’s approach and engagement.

Part 1

In this episode, we talk to David Thodey, one of our most respected company directors and currently Chair at Xero and Ramsay Healthcare.

Carolyn Pugsley (part of our market leading Head Office Advisory Team) and I talk to David about his career journey and provides some incredibly valuable insights into the role of a director and board in a cyber incident. Our discussion was so rich, we decided to break the podcast in two (we actually toyed with a series of podcasts with David alone).

Part 2

In this episode, Cam is joined by Carolyn Pugsley, an advisor to boards and a leader in corporate governance advice. Together we continue our discussion with David Thodey.

Today, we shift focus to some of the more challenging themes. We talk about the Cyber Strategy and payment of extortion demands. We also ask for David’s guidance for directors when dealing with the cyber challenge and ask him whether we are winning the cyber battle.

We start this podcast by asking for his observations on the responsibility that educational institutions play in helping with cyber education uplift.

Again, David’s thoughts are both considered, insightful and practical.

Part 1

In this episode, we talk to Ms Abigail Bradshaw, the Head of the Australian Cyber Security Centre (ACSC). Throughout her career, Abi has held a number of critical security related positions, including within the Department of Prime Minister and Cabinet and various senior roles in the Department of Home Affairs.

Ms Bradshaw began her career in the Royal Australian Navy, was awarded the Conspicuous Service Cross in 2005 and holds a Bachelor of Laws and a Bachelor of Asian Studies. A fascinating start to a remarkable career in the public service.

In this episode (part 1 of 2), Abi talks about her career and the increasing relevance of the ACSC. She provides a unique perspective to the cyber challenge, one that is based on resilience uplift across the economy.

Part 2

This is part two of our ‘cross examination’ of Ms Abigail Bradshaw, head of the Australian Cyber Security Centre.

In this episode, Abi notes that “a cyber criminal will attack the networks you have, not the network you think you have”. Such an important perspective! We also look at the role of the ACSC, the benefit of threat intelligence sharing and the way in which the ACSC can assist an entity (both with advice, technical assistance or disruptive actions). Abi also calls out her top 6 non-negotiables for building cyber resilience. Fantastic content.

Part 1

In this episode we cross examine Andy Penn, previously CEO of Telstra and more recently the Chair of the Government’s Expert Advisory Board (leading the development of strategic advice to the Government in relation to the Cyber Security Strategy). We caught up with Andy from his home in Mexico (a town called San Miguel de Allende). Andy brings a level of industry and policy expertise that is unrivalled. Again, we have split the discussion in two. In this episode, we talk about the formation of the Cyber Security Strategy, the dynamics of cybercrime, what success looks like and offensive / defensive security strategies. There is more to come in our conversation, but let’s kick things off with part 1 of our cross examination of Andy Penn. Here we go…!

Part 2

In this episode, we finish our cross examination of Andy Penn, previously CEO of Telstra and more recently the Chair of the Government’s Expert Advisory Board . The conversation just gets better...

Andy makes some insightful comments about the similarities between our physical world and our digital world, and how this should guide our measure of success. We also take a closer look at the Cyber Strategy, the value in placing responsibility on those best placed to take responsibility, what does "good" look like, the value in managing data holdings, threat sharing / locking, the benefit of transparency and reporting (rather than banning extortion).

Andy also makes some incredibly relevant (and sobering) observations on the impact that compute power and quantum computing will have on our security settings (“…a Y2K event when don’t know the date…”).

Finally, I ask Andy “what makes a great lawyer”? Luckily, we come out of that question relatively unscathed.

Part 1

This is Episode 3 of Cross Examining Cyber, where we cross examine Bill Siegel, CEO & Co-Founder of Coveware. We could have talked to Bill for hours, so we have broken this podcast in two.

Part 1 covers a range of issues including the establishment of Coveware, the value of good data, cyber extortion payment trends, cyber extortion “business models” and the challenging geopolitics we all face. Here we go…

Part 2

In this episode, we return with Part 2 of our discussion with Bill Siegel, the CEO of Coveware. We look closely at Coveware itself (and its history), the scope of Coveware’s services, how threat actor negotiations unfold, banning ransom payments, the role of the cyber simulation and what makes a good simulation. We also discussed the role of the board during an incident and managed to squeeze some cyber predictions out of Bill, including the impacts of AI on the cyber landscape. This is a “must listen” episode!

Part 1

In our inaugural podcast, we are joined by Hamish Hansford, Deputy Secretary Cyber & Infrastructure Security, Home Affairs.

Part 2

Hot-on-the-heels of our inaugural podcast, we now bring you Cross Examining Cyber, Episode 2, the cross examination of Hamish Hansford (Part 2). We take the time to speak to Hamish about the SOCI Act, whether we are winning the war on cyber and the role of lawyers in the crisis room..