Vijay克裏希南

2023年2月20日

沙龍Klyne *說更嚴格的審查主要養老基金收緊自己的網絡安全。超級基金已經加強了安全控製和監測係統,以保護成員的金融監管機構對違反在嚴格審查的數據在去年的網絡攻擊導致健康保險公司在澳都斯和客戶數據的竊取。秘魯革新黨已經優先考慮網絡彈性在銀行、保險公司和超級基金今年作為監督的關鍵領域。“操作彈性,包括網絡防範,持續增長的重要性作為監管重點,重要數據泄露在澳都斯和健康保險公司去年年底強調為什麼,”秘魯革新黨主席約翰·朗斯代爾說。監管機構最近已與超級基金受托人討論這種風險。“網絡安全是一個關鍵的優先事項。這個領域我們不斷發展的景觀的威脅,尤其是在身份管理、“TelstraSuper首席執行官克裏斯·戴維斯告訴投資雜誌。“社區的廣泛的網絡攻擊後,我們正在實施額外的措施來保護和維護賬戶。“這些額外的安全措施包括執行額外的安全性和驗證檢查成員交易賬戶時,請求額外的安全驗證細節從成員時調用該基金,為成員提供的選項添加額外的安全問題時他們的帳戶。健康保險公司由於澳都斯和攻擊,澳大利亞退休信托公司提出了常規滲透測試的網絡邊界探測弱點首席技術官杆格林納威說。 “We are [moving forward with]… continued awareness campaigns with our team members, our incident response plans and prioritising investment in our digital fraud prevention technologies, with a focus on detection and response in the event of suspicious activity.” ART has imposed two-factor authentication, access controls, fire walls, virus scanning, encryption and regular security training for staff as well increased security measures for members such as password protection and additional checks for withdrawal activity. Increased investment The funds Investment Magazine spoke to said they were investing in technology security. Though all declined to give dollar figures, UniSuper said its budget grew by 30 per cent this year. UniSuper has a 25-person strong technology security team and security operations is outsourced to a third-party provider on a 24/7 basis. It has deployed multi-layered controls to protect sensitive information and increased member awareness through bulletins and call centres. UniSuper head of information security Vijay Krishnan says the biggest change since last year has been the increased focus from the board and senior management which has resulted in more information sharing on how the fund is managing the increased risk. AMP similarly has introduced extra security controls to verify identity and frequent review of security logs to detect and block suspicious activity on member accounts, according to AMP chief technology officer Felicia Trewin. “Protecting our customers and members from cyber risks is a major focus for AMP and an area where we continue to invest to ensure best practice,” she says. AMP also works with the Australian Cyber Security Centre, law enforcement and threat intelligence organisations. Reputational risk Spirit Super reported some 50,000 members were hit by a data breach last May due to a phishing attack, underscoring how vulnerable super funds are to cyber attacks and reputational risk. “We need to safeguard our members data as any misuse may impact them for life. “Any breach is just not about the loss of money but the loss of reputation,” UniSuper’s Krishnan says. As the competition for member growth intensifies, reputation is critical for funds to raise their profiles says Michael Swinsburg, managing partner – Australia at executive search firm Alexander Hughes, who advises wealth managers and super funds on senior executive recruitment include chief technology officer roles. “No one wants to be a news headline for a cyber breach like Medibank. “This would be more damaging to member confidence and fund reputation than poor performance on the YFYS benchmark test,” he says. The breaches at Optus and Medibank are only a fraction of the security attacks reported. UniSuper encounters billions of attempts on its systems through automatic bots looking for vulnerabilities according to Krishnan, highlighting the enormity of the issue. “The breaches at Optus and Medibank are only the tip of the iceberg. “There would be security events happening almost every day,” he says. This article first appeared at investmentmagazine.com.au