Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Essential Eight: The Foundation of Australian Compliance

The Australian Signals Directorate (ASD) is the overarching agency that incorporates the Australian Cyber Security Centre (ACSC), the government’s technical cybersecurity authority. In 2018, the ASD became a statutory agency, assuming responsibility for the Computer Emergency Response Team Australia and the Digital Transformation Agency.

Why Everyone Must Learn AI Skills in 2026 #shorts #ai

AI skills are no longer optional. The US Department of Labor recently released an AI Literacy Framework, making AI knowledge a basic workforce skill for the future. This means every worker should understand: Basic AI principles AI use cases Prompting AI correctly Evaluating AI outputs Using AI responsibly AI literacy is quickly becoming a core job skill across all industries, not just tech.

Ep. 50 - Inside Trump's 2026 Cyber Strategy: Why "Check-the-Box Security" Is Dead

The U.S. just made its boldest cybersecurity move in decades. In this episode of the Cyber Resilience Brief, we break down President Trump’s 2026 Cyber Strategy—and why it signals a massive shift from reactive defense to proactive, offensive cybersecurity. What does this mean for CISOs, security leaders, and the private sector? We unpack the strategy’s most critical pillars, including: This isn’t regulation—it’s a call to action. And for organizations that fail to continuously validate their defenses, the risks have never been higher.

Is Wix Secure Enough? Understanding the Next Layer of Protection for Growing Websites

You click “Publish” on your Wix site and breathe easy. HTTPS? Check. Automatic updates? Check. Hosting handled? Check. Your website feels bulletproof. But here is the catch: security is not static and neither is your website. Every new feature, integration, and user interaction opens a door, sometimes one you didn’t even know existed. Hackers are constantly scanning, probing, and testing sites like yours. They don’t care if you are small; they care only about finding a weak spot.

The CEO Who Handled a Cyber Crisis Perfectly

A banking incident early in one career showed what good leadership looks like, with senior executives handing over a credit card, arranging food, hotel rooms and proper shift rotations. Instead of demanding updates every five minutes, leadership shielded the team from pressure, supported rest cycles and focused on helping the business survive. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Missing one person could shut down everything #BusinessRisk #Vulnerable

One exercise killed off the leader on paper and left the management team to run the organisation without that decision maker or access to key mandates. The scenario exposed hidden dependencies, legal bottlenecks and fragile processes, and forced everyone to map where single points of failure threaten both business and incident response. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Is Your Jira Instance Quietly Becoming a Data Liability?

Jira silently accumulates PII, credentials, and sensitive data through everyday team use. Security and compliance teams can detect and remediate this exposure using miniOrange's DLP PII Scanner, which scans historical and real-time content without disrupting workflows. There's a moment every security or compliance professional dreads. It's not a dramatic breach. It's quieter than that.

Workforce Identity and Access Management (IAM) for Remote and Hybrid Workforces

Remote and hybrid operating models have fundamentally changed how enterprises secure users, systems, and data. In 2026, the "workplace" is no longer limited to a traditional corporate office setup; it is a distributed ecosystem of home offices, transit hubs, and cloud-native applications. Workforce Identity and Access Management (IAM) has therefore evolved from an IT convenience into a primary security control governing how modern organizations operate safely at scale.

Joiners, Movers, and Leavers (JML): What It Is, & Why It Matters

Modern organizations frequently onboard new employees, manage internal role changes, and handle departures across multiple business applications. Without a structured identity lifecycle, access requests become manual, inconsistent, and difficult to track. This directly affects security, operational efficiency, and audit readiness. A defined JML process in IAM ensures that the right users receive the right access at the right time while reducing administrative overhead.