CultureCategory

Creation of good policies and procedures is an art that can be helped with some core advice. Policies are the backbone of how a business tells their employees how to act and react, and ensures consistency and productivity. A great company culture, a consistent vision and values, and compliance with… Continue Reading Creating good policies and procedures

On International Women’s Day, I am reminded of the need for diversity in the workforce, and want to pose the question of what does diversity mean to you? Diversity is not just the inclusion of other races, genders and backgrounds. More than just a blind quota of non-white, non cisgender,… Continue Reading What does diversity mean to you?

Terminology around privacy and security often will use the term “PII” – to refer to “Personally Identifiable Information”. However, PII in Australia is not a valid term – the definition by the OAIC is “personal information”, and it differs from the US term (from NIST) and the legal obligations around… Continue Reading PII in Australia and personal information

I have posted a few articles about different security standards and frameworks, such as PCI-DSS, The Essential 8, ISO27001, NIST and others – and in my experience, there are some organisations that focus on compliance instead of security. People desperately chase the dogma of maturity levels or complying with every… Continue Reading Focus on Compliance or Security?

As the world becomes more aware of cybersecurity risks and issues, company boards need to become more aware of the issues that cybersecurity poses for their businesses. However, it can be difficult for non-technical people to learn the new terminologies and concepts. The question still remains on how we educate… Continue Reading Educate Boards in Cybersecurity

It is a well-known adage in cybersecurity that there is a balance between usability and security – if you increase the security and control, you decrease usability. Conversely, to make a system user-friendly and easy to use, it has to be done at the cost of lowering security. This has… Continue Reading Challenging the balance between security and usability

Often misunderstood, but the concept of “design for failure” is now common in the lexicon of system design and business operations. When you design for failure, it is not because you want to fail – instead it is with the understanding that failures can and do happen, but you want… Continue Reading How to design for failures

There are many projects I have been involved with, where the product design or implementation has been driven by the need for reporting, analysis or compliance, but backend effectiveness does not equate to customer satisfaction, and businesses should be more aware of this in their product releases. A key example… Continue Reading Backend effectiveness does not equate to customer satisfaction

People have asked me about my leadership style, and as it is such a common question, I have decided to post it here. People recognise that I am passionate, and I lead through inspiration and desire to achieve the strategic goals. I am a positive and passionate person who motivates… Continue Reading My leadership style

Solving problems often takes a completely new viewpoint over what the problem actually is. There have been many recent studies and trials of working weeks durations, including a successful trial at Microsoft for a 4-day week that increased productivity. However, I have a different idea to solve the problem: changing… Continue Reading The new week – 5 on, 5 off

Issues arose with using VPN servers when workforces expanded and scaled up. VPNs were built around a model where IT administrators distributed the devices employees used so they knew the network, device, and person. But remote work changed everything.    As the workforce expanded globally and added contractors along with… Continue Reading VPNs and Zero Trust

It is human nature to try and avoid mistakes and the embarrassment of failure, after all, it is educated in to use to avoid mistakes through “operant conditioning“, but it is important to take a policy of embracing mistakes in cybersecurity, to avoid people trying to hide times when they… Continue Reading Embracing mistakes in cybersecurity

Organisations often run head-long into digital transformation, with a focus on technology and toolsets, and not fully understanding the impact on staff. Digital transformation is more than just moving all paper processes into electronic versions of themselves, more than just running out some new collaborative tools or enabling legacy applications… Continue Reading Digital Transformation and People

During my MBA, I was taught that the purpose of a business is to make money, and that customers should always be the focus of everything a company does. However, I think that this view is no longer valid and that my role in leading business by caring for staff… Continue Reading Leading business by caring for staff

We have all been there, either by working with someone straight out of University or when you were entering the workforce straight out of education – full of passion and enthusiasm, and keen to make a change. The teenager (or person in their twenties) may challenge and ask questions about… Continue Reading Teenagers might have answers

Why is it that business transformation so difficult to successfully achieve? I believe that the fears and insecurities that keep people locked into behaviours, even invisible fears, even when we know rationally that we should change. Whilst it is possible to change policies, processes, office layout and other external factors,… Continue Reading Change is about people, not policies

With the increased prevalence of working from home initiated by the Covid-19 pandemic, we all need to be more aware of the concern with remote working, which is to include your colleagues. Back in pre-coronavirus days, the concept of “working from home” was often reserved for senior employees, and used… Continue Reading Remote working – include your colleagues