The financial and reputational damage from a cyber attack can be devastating. When an organisation falls victim to a breach, the consequences extend far beyond the initial incident: recovery costs spiral, customer trust evaporates, and regulatory scrutiny intensifies.
In Australia, recent high-profile incidents involving Medibank, Optus, and Qantas have shown that even the biggest organisations aren’t immune. Unfortunately, the question isn’t whether your business will be targeted, but when, and whether you’ll be prepared to withstand the assault.
This is the advice we here at Gridware advocate when working with Australian organisations:
1. Implement Multi-Factor Authentication Across All Systems
Password security alone no longer provides adequate protection. Public reporting indicated that the absence of multi-factor authentication on certain critical systems was a contributing factor in the Medibank breach. Multi-factor authentication adds an imperative second layer of defence by requiring users to verify their identity through something they have (like a mobile device) or something they are (like a fingerprint), in addition to something they know (their password).
Even if your credentials are compromised through phishing or data breaches, attackers cannot access your systems without that second authentication factor. Deploy MFA across all business applications, particularly for email accounts, remote access, and administrative systems where the stakes are highest.
2. Maintain Rigorous Software Updates and Patching Schedules
The Australian healthcare industry has been the target of multiple attacks, with obsolete software often cited as a driving factor. Vulnerabilities in outdated software represent one of the most common entry points for cybercriminals. When software vendors release security patches, they’re addressing known weaknesses that attackers are already exploiting or soon will be. They could turn their attention towards your network, causing serious damage and long-term disruption.
Establish a systematic approach to updating all software, including operating systems, applications, firmware, and security tools. This includes not just your servers and workstations, but also network devices, mobile systems, and any Internet-connected equipment.
3. Strengthen Access Controls and Follow the Principle of Least Privilege
You may trust all your employees, but that doesn’t mean they all need access to every system or piece of data. Investigations indicated that the use of compromised credentials at Latitude Financial was a contributing factor in their breach, highlighting the risks of inadequate access restrictions and credential management. The principle of least privilege means granting users only the minimum access necessary to perform their specific job functions and nothing more.
Gridware’s advice? Review and refine user permissions regularly. When employees change roles or leave the organisation, update or revoke their access immediately. Implement network segmentation to contain potential breaches, ensuring that if one area is compromised, the damage doesn’t spread throughout your entire infrastructure.
4. Build a Culture of Security Awareness Among Employees
Your employees represent both your greatest vulnerability and your strongest line of defence. Phishing attacks, social engineering schemes, and other tactics that manipulate human behaviour continue to succeed because they exploit trust, curiosity, and the desire to be helpful.
We recommend running regular training sessions to keep security top of mind and help staff recognise suspicious emails, questionable links, and unusual requests. Make reporting potential threats easy and rewarding, so that employees feel comfortable raising concerns without fear of retribution or blame.
5. Establish Comprehensive and Tested Backup Systems
Ransomware attacks have become increasingly sophisticated and destructive. When systems are encrypted and held hostage, organisations face an agonising choice: pay the ransom with no guarantee of recovery, or lose potentially irreplaceable data and face extended downtime.
Robust backup systems eliminate this dilemma. Maintain regular backups of all critical data and systems, stored both on-site and in secure off-site or cloud locations. More importantly, test these backups regularly to verify they can actually be restored when needed. Many organisations discover too late that their backup strategy, which looked solid on paper, failed in practice. Your backup system should follow the 3-2-1 rule: three copies of data, on two different media types, with one copy stored off-site.
6. Develop and Practice an Incident Response Plan
Despite your best preventive measures, breaches can still occur. How your organisation responds in those critical first hours and days often determines whether an incident becomes a minor disruption or a full-blown crisis. Your incident response plan should clearly define roles and responsibilities, establish communication protocols, and outline step-by-step procedures for containing and recovering from different types of attacks. Include contacts for legal counsel, cyber insurance providers, and relevant regulatory bodies. Critically, don’t let this plan gather dust - conduct regular drills and simulations to ensure your team knows exactly what to do when seconds count.
