The Victorian environmental watchdog’s recent investments in staff cyber awareness, data leakage prevention and cloud environment controls align with its security program’s goal of going beyond regulatory box-ticking through proactive risk management.
Box-ticking vs risk-based approach
Environmental Protection Authority (EPA) Victoria’s CISO Vijay Narayan broke down the cyber security program’s advancements in the past year across its different categories.
“Improving staff education about security, improving the security controls of our cloud environments and end-user systems and preventing data leakage – I think the investment has paid off in a lot of these areas,” Narayan told iTnews.
Narayan listed the ways EPA hardened its defences in these areas, while…
