< News One File After Another 19 Mar 2026 “One Battle After Another” may have won Best Picture at the 2026 Oscars, but winning being judged Best for seven years in a row is on a whole new level! GoAnywhere MFT has won G2’s Best Managed File Transfer software accolade for seven consecutive years. While The Academy loves a good drama, your IT team can do without. Present them with GoAnywhere MFT and your files will be transferred automatically, reliably, securely – and peacefully. Previous Next

< News GoAnywhere V7.7 released – with Fortra Threat Brain protection 13 Dec 2024 Great news for our GoAnywhere MFT customers, with your software now able to leverage insights from Fortra Threat Brain to further protect your managed file transfers. Fortra Threat Brain is a comprehensive cyber security information hub, fed by telemetry from the Fortra’s expansive portfolio of products as well as insights from across the dark web, social media, and law enforcement. It brings together a team of threat intelligence analysts and partners, an expansive portfolio of AI-enabled cybersecurity products, and a vast array of intelligence sources, to provide even stronger protection for your valuable data. The up-to-date threat intelligence from Fortra Threat Brain enables GoAnywhere to reject HTTP/S service connections flagged as malicious. That includes connections to GoAnywhere’s Web Client, AS2, AS4, and any other endpoints that run on the HTTPS service. Extended file transfer protection is just one of many enhancements available in GoAnywhere Version 7.7, now released to customers for download. (And if you’d like our help with upgrading, be sure to check out our GSA Annual Upgrade & Health Check Service .) Previous Next

< News Don’t Let Your Data Be Lost in Cyber Space 2 Sept 2025 In this digital age, our businesses depend on the seamless movement of files to operate efficiently. From financial reports and customer data to product designs and legal documents, files are the lifeblood of a modern organisation. However, despite sophisticated networks and cloud-based tools, files still vanish into cyberspace, leading to business disruption, unhappy customers and confused suppliers. The reasons files go missing are often quite mundane. Perhaps they were intercepted, having been sent via unsecured email. Perhaps their transfer failed silently and unknown, due to a network glitch. Maybe an employee uploaded the document to the wrong folder, or worse, to the wrong server. Legacy systems, manual processes, and ad hoc workarounds compound the problem. Without proper oversight, files can be lost, duplicated, corrupted, or exposed—leading to compliance violations, reputational damage, and costly delays. Avoid Data Danger, Will Robinson! This is where Managed File Transfer (MFT) technology steps in—not as a patchwork fix, but as a strategic upgrade. MFT provides a secure, automated framework for transferring files across internal systems, external partners, and cloud environments. It replaces risky methods like FTP, email attachments, and consumer-grade sharing apps with encrypted, policy-driven workflows. Security and Reliability MFT platforms use robust encryption protocols (like SFTP, FTPS, HTTPS) to protect data in transit. Authentication mechanisms ensure only authorised users can initiate or receive transfers. Files are tracked from origin to destination, with detailed logs and alerts for failures or anomalies. This means no more blind spots—every movement is visible, verifiable, and recoverable. Compliance and Control For industries bound by regulations (finance, healthcare, government), MFT offers built-in compliance features. Audit trails, role-based access, and data retention policies help meet demanding standards like GDPR, HIPAA, and ISO 27001. Administrators can monitor activity in real time, enforce file naming conventions, and prevent unauthorised access or data leakage. Automation and Integration Beyond security, MFT streamlines operations. It integrates with ERP systems, cloud storage, and APIs to automate recurring transfers—like nightly batch jobs or supplier updates. This reduces human error and frees up IT teams to focus on higher-value tasks. Some platforms even support conditional logic, retry mechanisms, and load balancing to ensure mission-critical transfers never fail silently. Scalability and Visibility As organisations grow, so does the complexity of their data flows. MFT scales effortlessly, handling thousands of transfers per day across geographies and departments. Dashboards provide a centralised view of all activity, making it easy to spot bottlenecks, troubleshoot issues, and optimise performance. In short, Managed File Transfer transforms chaotic, error-prone file sharing into a disciplined, auditable process. It’s not just a tool—it’s a safeguard against digital entropy. For organisations juggling sensitive data across borders and platforms, MFT ensures that files don’t just travel—they arrive, intact and accounted for. From “Lost in Space” to “Found, Locally” At Generic Systems Australia we’re Australia’s and NZ’s experts in deploying Managed File Transfer solutions. We’ve assisted businesses of all sizes to protect their customer data and secure their file transfers, while keeping their operations running smoothly. If you’d like to discuss how we can help you, please feel welcome to contact me . I’m always happy to have an obligation-free chat and explain how simply we can help you maintain your customers’ trust. Previous Next

< News MFT: Not Just Your First Line of Cyber Defence 16 Sept 2025 Every organisation serious about protecting its data will likely come to view a Managed File Transfer (MFT) solution as one of their first lines of defence. Employing MFT as the standard when exchanging data puts organisations light years ahead of businesses still relying on risky File Transfer Protocol and email to transfer files. MFT platforms not only centralise – and therefore, control - data transfer, they also enable companies to apply comprehensive policies which protect data. Data can be insulated from threats as diverse as inbound malware to careless employees entrusting files to external platforms beyond an organisation’s direct control, such as Google Drive and Dropbox. Critical protection policies, such as those encompassing encryption, monitoring, and auditing capability, can be enforced. High Volume = High Exposure In 2024, businesses were responsible for generating around 30% of the world’s data—an astonishing ~44.1 zettabytes. That included data such as transaction records, CRM logs, ERP systems, IoT sensor data from manufacturing and logistics, internal communications, analytics, and cloud backups, AI training datasets and other enterprise software usage. But as the volume of data used and consumed by businesses grows, so too does the cost and impact of potentially losing that data. The high ransoms now regularly being paid to cyberthieves amply demonstrate just how valuable business data has become. Surely it makes more sense to invest in a relatively inexpensive protective technology like MFT, than to lose equivalent funding — or greater — in the form of ransoms paid to cyber thieves? Lessons from Bankers Banks, traditional repositories of valuables from cash, precious metals and sensitive documents, have learned a lot over the years about protecting assets. And their learnings are relevant to how we should be protecting our valuable data. Banks no longer store our valuables in a single bank vault. Nor for that matter do they store our digital currency on a single server. Rather, banks protect our precious assets — physical and digital — behind layers of security. Physical valuables sit behind physical barriers, multiple locks, access control systems, remote monitoring and security guards. Digital valuables are protected against threats such as malware, ransomware, accidental data loss, third-party exposure, and zero-day attacks by a broad array of technologies. Sitting beneath those technologies, ensuring they’re enforced and providing a sound bedrock of centralised control, surveillance and auditing, is MFT. Adding Layered Defence At Generic Systems Australia we’re adept at installing and maintaining the world’s leading MFT, GoAnywhere . And our Advanced Threat Protection (ATP) bundle significantly enhances GoAnywhere’s data protection capabilities by introducing a proactive, multilayered defence against both external threats and internal data leakage. While GoAnywhere already provides secure encryption, access controls, and audit trails for file transfers, the ATP bundle adds dynamic inspection and sanitisation that targets the content itself—not just the container. At the heart of this integration is the Clearswift Secure ICAP Gateway, which enables deep content inspection and adaptive Data Loss Prevention (DLP). This means every file transferred through GoAnywhere can be scanned for malware, embedded scripts, macros, and other active content that could compromise systems. Unlike traditional antivirus tools, ATP sanitises files in real time—removing only the malicious elements while allowing legitimate content to pass through uninterrupted. Limiting Exposure Beyond malware, the ATP Bundle also addresses sensitive data exposure. It can detect and block files containing personally identifiable information (PII), financial records, or confidential metadata before they’re shared externally. Policies can be set to redact sensitive text, strip geotags and even apply optical character recognition (OCR) to scanned documents to catch hidden data. This empowers organisations to enforce granular control over who can transmit sensitive content and under what conditions—adding a layer of governance that encryption alone cannot provide. In essence, the ATP Bundle transforms GoAnywhere from a secure conduit into an intelligent gatekeeper. It doesn’t just move data safely—it understands what’s inside, evaluates its risk, and ensures that only clean, compliant content reaches its destination. Modular Enhancements Augmenting GoAnywhere’s capabilities are Modules which can further protect an organisation from the inherent risks of legacy protocols such as SFTP/FTPS, email attachments and manual processes. SFTP Server can be upgraded to by GoAnywhere SFTP Server Module, enabling SSH-encrypted transfer with centralised access control, audit logging and integration with Active Directory. FTPS Server can be upgraded to FT Module, offering SSL/TLS encryption, customisable access, and DMZ-safe deployment via GoAnywhere Gateway. HTTPS Web Uploads can be replaced by the Secure Folders Module to create browser-based file access with HTTPS encryption and user authentication. AS2/AS4/PeSIT can be replaced by Certified Protocol Modules, providing Retail and banking-grade secure exchange with Drummond certification. These modules consolidate disparate protocols into a single, scalable platform—reducing complexity, improving visibility, and enforcing consistent security policies across all transfers. Making Email Secure Email is ubiquitous. However, it's also one of the least secure ways to transmit sensitive data. Fortra’s Secure Mail module in GoAnywhere transforms ad-hoc file sharing into a secure, trackable process without disrupting user workflows. Using Secure Mail, Users send files as secure encrypted packages via their browser or an Outlook plugin. Recipients receive a unique link to download via HTTPS — no files are sent directly via email. Senders can set expiration dates, download limits, and password protection, and all activity is logged for auditability and compliance. Secure Mail keeps files on your infrastructure until accessed, eliminating third-party hosting risks and ensuring full control over sensitive data. Strategic Defence By replacing legacy protocols and insecure email practices with GoAnywhere’s modular architecture, organisations gain: • Unified governance over all file transfers; • Reduced attack surface via DMZ-safe deployment; • Improved compliance with GDPR, HIPAA, PCI DSS; and • Streamlined user experience without sacrificing security. Here to Help At Generic Systems Australia we have decades of experience helping Australian and New Zealand organisations protect themselves against malware and other cyber attacks through the power of the world’s leading MFT solution. Our Migration Service makes the transition even easier for organisations who prefer to use their resources building their businesses rather than improving their IT plumbing. If you’d like a no-cost, no-obligation discussion about how we could help you simply and affordably adopt an advanced MFT solution, please feel welcome to get in touch with us. At Generic Systems Australia, we’re your local experts in Secure Managed File Transfer. Previous Next

< News Cyber Target Paris Prepares 23 July 2024 As the attention of sports fans turns to Paris this week, so too are the nefarious attentions of the world’s cyber criminals. So: how will the world’s largest sporting event keep its data and systems secure…? Read on to learn more from those charged with defending the Summer Olympics’ IT systems. Miscreant Magnet Vincent Strubel, head of France’s national cybersecurity agency (ANSSI), warned that this year’s summer Olympics was facing an unprecedented level of cyber threats. Said Strubel: “There will be cyberattacks during the Games and the Paralympics... Some won’t be serious. Some will be serious, but won’t have an impact on the Games. And perhaps there will be some that are serious and liable to have an impact on the Games.” Franz Regul, head of the cyber team responsible for Paris 2024, said he expects the number of security events this year to be “multiplied by 10 compared to Tokyo”. There is a need to keep an exceptionally tight attack surface and tie up any loose ends like SSL misconfigurations, open ports, and privacy issues such as cookie consent violations. French anti-cybercrime units have classified the cyber threats in five categories: 1. Amateur Hackers As the “as-a-service” cybercrime economy develops, it’s become easier than ever for novice threat actors to launch more sophisticated attacks than their limited skillsets would otherwise have allowed. This lowered bar for entry will lead to a higher overall number of attacks. 2. Thrill-Seekers The sheer size and popularity of the Olympic Games will tempt those broadly inclined to create nuisance or show off their “cyber chops” to their peers. They’ll likely seek to exploit any security weaknesses in the websites or booking sites purposed for the event, including those of media organisations and sponsors. Common website security attacks such as cross-site scripting, SQL injection, and DDoS attacks will be their primary threat vector. 3. Hacktivists Activists passionate for their cause of choice are likely to attempt to hijack the world’s largest stage. 4. Black Hat Thieves The immense cashflow around the Paris Olympics makes them a potentially lucrative target for cyber thieves. Phishing attempts – expected to arrive in the form of unsolicited emails about the Games, lodging, tickets, or information followed by “helpful links” – will abound. Those who open the emails and click on the links may find their bank accounts quickly compromised. 5. Nation-State Actors The Olympics have long been a huge world stage on which global powers send political signals to countries, governments, and the world at large. As the Associated Press recently noted, “Among the most threatening cyber-adversaries are countries who might want to embarrass and exact costs on France and the International Olympic Committee.” Defending the Games French cybersecurity authorities are cagey about the significant precautions they’re taking to thwart cyber criminals. Revealing too much would give away a tactical advantage to blog-reading Black Hats. However, here’s what we know so far… 1. Ethical Hackers The ANSSI has hired ethical hackers to test the attack vectors on all Olympic websites. According to Strubel, 500 sites, competition venues and local collectives have all been put under “friendly fire”. 2. AI Artificial Intelligence is being employed to test for multiple threats across IT systems and websites. Regul said that AI was helping differentiate “between a nuisance and a catastrophe”. 3. Physical Security Transportation, supply chains, and surveillance systems are other potential targets for those seeking to compromise the Games. All have been included in the safety perimeter of the Paris 2024 cybersecurity preparations. 4. External Expertise The 2018 Winter Olympic Games were targeted by malware dubbed “Olympic Destroyer”, which aimed to disrupt the opening ceremony. Paris cybersecurity teams have tapped the knowledge and experiences of the consultants who detected and disabled that threat. A Bug Bounty program has also sought to attract the time and skills of independent IT practitioners. 5. Education & War Gaming During the past two years, ANSSI has been “war gaming” cyber incidents with the International Olympic Committees’ IT partners, and deploying cyber defence education programs across the thousands of people responsible for operating the Paris Games’ IT systems. No News will be Good News The final word on Paris’s cyber preparations belongs to Jérémy Couture, who helms the official cybersecurity hub of the Paris Olympic games. Couture said his dream for the Olympics is that technology and cybersecurity won’t be talked about - because that will mean they were a non-issue. Sports fans around the world will be hoping his dreams become reality. Need a Local Expert? If – like the Paris Games - you’d like to tap local expertise keep cyber criminals at bay, please feel welcome to contact me, Bradley Copson ( mailto:bradley@gensys.com.au ). I’m always happy to have an obligation-free discussion, explain how simply we can transition you from outdated software and approaches, and offer you a zero-cost Proof of Concept. At Generic Systems Australia , we’re your local experts in secure Managed File Transfer. #MFT #managedfiletransfer #securefiletransfer #sft #cybersecurity #datatransfer Previous Next

< News The GoAnywhere Customer Who Didn’t Panic 20 Aug 2025 In Douglas Adams’ much-loved work of science-fiction whimsy, The Hitchhiker’s Guide to the Galaxy, the Babel Fish is a small yellow fish inserted into a person's ear to provide instant translation of any language.  Described by The Guide as “probably the oddest thing in the universe”*, the Babel Fish is a neat (if somewhat slimy) solution to the pervasive galactic challenge of interspecies communication. It reminds me how GoAnywhere MFT once solved a customer’s pressing “payslip-up”. “But the plans were on display…”* Our customer, a leading provider of human services who employs thousands, had installed a new payroll system. This system, like the outdated system it was replacing, produced employee payslips as PDF files. These were subsequently distributed to employees via a separate Human Resources system. Installation, testing and initialisation of the new payroll system had all gone according to plan. Until, that is, the first pay run was performed. “Have you any idea what these strange symbols are?”* In what The Hitchhiker’s Guide may well have cited as “a practical demonstration of the principles of infinite improbability” employees didn’t receive their payslips. It was soon realised that the problem had occurred because the PDF payslips produced by the new payroll system were formatted differently to the PDFs previously produced by the old one. (The old system had output the PDFs as individual PDF files for each employee, compressed into a zip file. The new system output one PDF file for each employee and, further complicating the situation, the new payslips varied in number of pages.) These PDF formatting changes rendered the output from the new payroll system unreadable by the Human Resources system - a problem which had somehow been overlooked during testing. “The consequences of not knowing any of this stuff are particularly terrible”* This failure of inter-systems communication wasn’t just a problem for the employees, who had understandably grown accustomed to keeping tabs on their earnings, but it created a looming compliance problem for the business. Australia’s Fair Work Act is vexingly inflexible when it comes to the timing of providing employees with payslips. (This is in marked contrast to the famously flexible relationship with time enjoyed by The Guide’s author Douglas Adams, particularly as relates to deadlines). Failure to fix the problem quickly would expose the business to financial penalties, legal consequences and potential union action. “Don’t Panic!”* Heeding the single most important piece of advice in The Hitchhiker’s Guide to the Galaxy , our customer didn’t panic. Instead, they called me to ask whether Generic Systems Australia could help solve their predicament. And - thanks to their installed GoAnywhere Managed File Transfer solution – we could! The Babel Fish* Faster than a Vogon invited to a poetry recital**, our Solutions Architect revised the customer’s GoAnywhere automated file transfer process. GoAnywhere was already collecting the PGP-encrypted PDF from the new payroll system via SFTP, decrypting it, and transferring it to the customer’s Human Resources system. He added to that automated transfer process new logic which split the PDF pages, correctly formatting the output and allowing for payslips of varying page lengths. GoAnywhere was, in effect, performing the role of a computerised Babel Fish. And, thanks to GoAnywhere’s easy to use drag-and-drop interface, it took our Solutions Architect less than half a day to set up the workflows. He didn’t even need a towel***. “If you ever need help again…”* There’s no need to go to the ends of the universe**** to get expert help on file transfers and translations. At Generic Systems Australia , we’re Australia and New Zealand’s experts in helping business take advantage of every one of GoAnywhere’s many capabilities. We’ve assisted hundreds of organisations to automate their data flows, making their file transfers resilient, secure and reliable, and boosting their efficiency. If you’d like to discuss how we can boost your organisation’s efficiency, please feel welcome to contact me . I’m always happy to have an obligation-free chat and explain how easily we can transition you from your current approach to a galaxy-leading level of productivity. At Generic Systems Australia, we’re your local experts in data transfer. _______________________________________________________________________________________ * A direct quote from The Hitchhiker's Guide to the Galaxy . ** In The Guide , Vogon poetry is described as the third worst in the universe, surpassed only by the poetry of the Azgoths of Kria and the late Paula Nancy Millstone Jennings. It's so bad, it's often used as a form of torture, causing physical pain to the listener. *** The Guide describes a towel as the most massively useful thing an interstellar hitchhiker can have - not just useful for practical purposes like warmth, sunbathing, or even as a weapon, but also with significant psychological value. A hitchhiker who knows where their towel is is seen as someone together and capable, as it implies they also possess other essential items. **** The Guide describes Milliways, the Restaurant at the End of the Universe, as being enclosed in a time bubble and offering a unique floorshow featuring the end of the universe. Previous Next

< News Companies Urged to "Assume You've Been Breached" 28 July 2026 The Australian Cyber Security Centre (CSC) - part of Australia’s top intelligence gathering agency – has urged organisations to adopt an “assumed breach mindset”. Put simply it’s advising companies to approach their cyber security on the basis that a breach has either already occurred or is imminent . Defeatist…? That’s not defeatism. It’s a practical evidence‑based shift in mindset driven by the speed, scale, and sophistication of modern cyber threats. ACSC’s rationale is straightforward. Attackers no longer rely on exotic zero‑days or elite skills. They exploit weak credentials, legacy systems, unpatched software, misconfigurations, and human behaviour - all common in organisations. Once they’ve gained access, they move quickly, quietly, and laterally. By the time a traditional perimeter‑focused security model detects them, the damage may already be done. Flipping the Traditional Mindset An assumed‑breach mindset flips the traditional corporate IT approach. Instead of asking, “How do we keep attackers out?” the ACSC encourages organisations to ask, “How do we limit what an attacker can do once they’re in?” This shift drives a different set of behaviours: continuous monitoring, rapid detection, containment, segmentation, least‑privilege access, and rigorous credential hygiene. It also forces leaders to confront uncomfortable truths about legacy technology, technical debt, and the fragility of critical business systems. The ACSC is clear that this mindset isn’t just a technical posture, it’s a governance posture. Boards and executives must treat cyber risk as a business risk rather than an IT issue. That means investing in modern platforms, reducing reliance on end‑of‑life systems, enforcing Multi-Factor Authentication (MFA), uplifting logging and monitoring, and ensuring incident response plans assume internal compromise from day one. The organisations that thrive in the current threat landscape aren’t the ones with perfect defences. They’re the ones that plan for failure, limit blast radius, and respond with speed and clarity. The Mindset and MFT Managed File Transfer (MFT) directly helps organisations adopt an assumed breach mindset by ensuring that even if an attacker infiltrates the network, data in transit and at rest remains heavily protected, tracked, and contained. Rather than relying on network perimeter security to keep data safe, MFT operates on the principle that the surrounding environment may be compromised, safeguarding the data itself. This includes: Data-Centric Encryption: MFT encrypts data while stored and while in transit. Even if an attacker has successfully breached the network and intercepts the files, the data remains unreadable and useless without the decryption keys. Tamper-Evident Auditing: Comprehensive, automated logs trace exactly who accessed, sent, or received a file. In an assumed breach scenario, these pristine audit trails are vital for forensic teams to quickly pinpoint what data was exposed. Micro-Segmentation of Data Flows: MFT removes files from vulnerable, shared network drives and places them in isolated, secure repositories. This restricts an attacker's ability to move laterally across the network to steal sensitive data. Strict Access Control: MFT platforms enforce role-based access control and MFA. If an attacker compromises a basic user account, MFT prevents them from accessing high-value file transfer workflows. Centralised Visibility: Instead of employees using unmonitored "Shadow IT" tools (such as personal cloud storage), MFT funnels all transfers through a single, monitored gateway. This enables security teams to easily spot anomalous data movements that indicate an active breach. Local Help on Hand At Generic Systems Australia, we’re Australia’s and New Zealand’s deep local experts in MFT. A top ten MFT partner for Fortra globally, we have many years of experience helping organisations from small to multinational install and leverage the world’s leading MFT, GoAnywhere . Let us know if you’d like to learn more about how GoAnywhere MFT can help you follow the ACSC’s advice. Previous Next

< News ‘Cyber Trust’ needed to tap EOFY splurge 25 June 2024 Australians are shifting their End of Financial Year (EOFY) shopping focus to online deals and security, as they spend an estimated $10.1B in EOFY sales this month. New research from PayPal indicates that 38% of Australians plan to participate in EOFY sales this year. 42% of those say they will primarily shop online. Despite the growing trend of online shopping, almost all Australians (93%) are concerned about online security. Fake retail sites have begun to use generative AI to appear more convincing, and 40% of Australians are more concerned about their online security now than they were a year ago. Implications for Retailers Growing customer anxiety about e-commerce makes it more important than ever before for companies to establish trust in the security of their systems. With customers beginning to question the security of a company’s systems before handing over credit card and other information, companies need to be able to provide reassurance - and proof – that their transactions and personal data will indeed be secure. In fact, actively promoting the security of company systems may even become a point of positive marketing differentiation for companies that get ahead of these concerns. Earning Customer Trust A proactive and layered strategy for storing, transferring and securing data is essential for storing customer data, and effecting online transactions. Secure managed file transfer, secure content engines, secure digital rights management, and employee education combine to create the optimal way to prevent data theft and cyber breaches. At Generic Systems Australia , we recommend the class-leading secure managed file transfer solution, GoAnywhere MFT , to keep data safe - at rest, and in transit. Coupled with our Advanced Threat Protection Bundle , we enable organisations to safely store and transmit only the customer data they intend, without exposing their systems to malware. If you’d like to learn more about how to earn potential customers’ trust in your data handling practices through layered cyber defences, please feel welcome to get in touch with me, Bradley Copson ( mailto:bradley@gensys.com.au ). I’m always happy to have an obligation-free discussion, and even offer you a zero-cost Proof of Concept. At Generic Systems Australia , we’re your Local Experts in Secure Managed File Transfer. Previous Next

< News New Cyber Laws Impose New Business Obligations 16 Oct 2024 Australia’s federal government last week introduced much-anticipated legislation to parliament which will revolutionise Australia’s cyber security preparedness. If passed as expected, the new laws will impose new compliance and reporting requirements on local businesses. Govt Intent Designed to protect businesses and consumers from the growing scourge of cyber crime, the Cyber Security Act 2024 is Australia’s first standalone cyber security legislation. Introducing the Act, Minister for Cyber Security, Tony Burke, said that – like IT systems themselves - legislation needed to be hardened to protect national security and economic stability. He described the package as providing a clear legislative framework for contemporary, whole-of-economy issues which would identify and respond to new and emerging cyber threats. Seven Initiatives There are seven initiatives under the 2023-2030 Australian Cyber Security Strategy which collectively address gaps in current legislation to: Mandate minimum cyber security standards for smart devices; Introduce mandatory ransomware reporting for certain businesses to report ransom payments; Introduce a ‘limited use’ obligation for the National Cyber Security Coordinator and the Australian Signals Directorate; and Establish a Cyber Incident Review Board. SOCI Reforms The legislation will also progress and implement reforms under the Security of Critical Infrastructure Act 2018 (SOCI Act): Clarifying existing obligations in relation to systems holding business critical data; Simplifying information sharing across industry and Government; Introducing Government powers to direct entities to address serious deficiencies within their risk management programs; and Moving regulation for the security of telecommunications into the SOCI Act. The SOCI Act reforms will also expand current Government assistance measures to ensure Government can step in as a last resort to manage the consequences of significant incidents. Govt Empowered Changes to government assistance measures will empower the Government to gather information or direct entities to take or refrain from certain actions, on authorisation from the Minister for Home Affairs, in response to a serious incident. Characterising the legislation as a significant step towards his government’s vision of becoming a world leader in cyber security by 2030, Tony Burke said: “We know government has to lead the way on cyber, but we also know we can’t do it alone. This is why these new laws have been consulted extensively with business. “To achieve Australia’s vision of being a world leader in cyber security by 2030, we need the unified effort of government, industry and the community.” New Business Obligations Legal firm A&O Shearman cautioned that the new Cyber Bill will introduce several new critical areas of compliance and reporting. It said businesses must take heed of these new obligations, and ensure they put in place robust cyber security measures. • Ransomware Reporting Obligations : Entities impacted by cyber security incidents and making ransomware payments must report these payments within 72 hours. The aim of this obligation is to improve the detection and response to ransomware incidents, thereby reducing their impact. Failure to report can result in civil penalties. • Security Standards for Smart Devices : The Cyber Bill mandates that manufacturers and suppliers of smart devices comply with specified security standards. This is crucial for businesses involved in the production or distribution of smart devices. Non-compliance can result in compliance notices, stop notices, and recall notices. These measures are designed to ensure that smart devices are secure and do not pose a risk to users. • Protected or Limited Use of Incident Information : The Cyber Bill includes provisions to ensure that information provided about cyber security incidents is used or disclosed only for permitted purposes, with strict limitations on using this information for civil or regulatory actions against the reporting entity. • Cyber Incident Review Board : The Cyber Bill establishes a Cyber Incident Review Board tasked with reviewing certain cyber security incidents and making recommendations. The Board has the authority to request and require documents from entities. Non-compliance may result in civil penalties. A&O Shearman said organisations should make sure they implement security standards in compliance with the specified security measures currently provided for in the Cyber Bill, and make sure they can comply with the ransomware reporting obligations, including the timelines foreseen in the Cyber Bill. Meeting New Requirements Criminal syndicates target organisations which haven’t adequately protected their data transfers and systems access. Defending against them requires a multi-layered strategy which includes robust data transfer protection, multifactor authentication and employee training. Managed File Transfer (MFT) solutions such as the class-leading GoAnywhere MFT encrypt data at rest and in transit, complying with the highest data security standards - including the US’s and Europe’s stringent HIPAA, HITECH, PCI DSS, SOX, and GDPR. MFT manages inbound and outbound file transfers across an organisation, using industry-standard file transfer protocols such as SFTP, FTPS, and AS2 to send files securely, and encryption standards such as Open PGP and AES to protect data in transit and at rest. GoAnywhere MFT also provides audit reports, which will help organisations meet new reporting and compliance needs. All file transfer and administrator activity is stored and easily searchable. To help organisations report on file transfer activity and remain compliant with the new legislation, these audit logs can be automatically generated and provided as PDFs. Advanced Threat Protection and Adaptive Loss Prevention add a further layer of defence. SFT Threat Protection enables safe collaboration with external parties, preventing malware from entering an organisation, and reducing the risk of employees losing or mishandling sensitive data. Local Expertise on Hand Generic Systems Australia are your local experts in Managed File Transfer solutions. We’ve assisted dozens of organisations across the Asia-Pacific region to secure their data and keep cybercriminals at bay. If you’d like to discuss improving your cybersecurity, please feel welcome to contact me , Bradley Copson. I’m always happy to have an obligation-free discussion, explain how simply we can transition you from outdated software and approaches, and offer you a zero-cost Proof of Concept. Previous Next

< News Stop playing Cyber Security Whack-a-Mole! 27 Aug 2024 The increasing number and sophistication of cyber incursion attempts is stretching corporate IT departments to their limits. No sooner is one attempt identified and blocked, but another pops up. Georgia in Accounts just clicked on a bogus link in a phishing email. Rowan in Marketing is about to send a spreadsheet containing sensitive customer information to a direct marketing agency. Arush from Sales doesn’t realise the bank account details he’s emailing to HR are about to be intercepted in a “man-in-the-middle” attack. The CEO’s personal assistant, Grace, doesn’t realise she’s corresponding with an AI bot designed to cleverly gather identity information about her boss. It’s relentless - a new cyber attack every six minutes! 1 High Stakes The escalating frequency of incursions means a company’s stressed-out IT team must stay vigilant. In this high-stakes game of cyber security Whack-a-Mole, the cost of failure is simply too high: the cost of cybercrime to businesses has increased by 14% year-on-year1. share markets punish companies which fail to safeguard their data2. class actions – by those whose personal data was stolen, and shareholders seeking compensation for share devaluations – ensue3. damaged customer trust stymies revenue and market share growth4. cyber insurance premiums skyrocket5. Ditch that Rubber Mallet Wouldn’t it be great if there was a way your team could opt out of the never-ending game of cyber security Whack-a-Mole…? A way to automate your organisation’s cyber defences, assigning cyber sentries to detect and block cyberthieves, whenever and wherever they pop up? Good news – there is! And it’s surprisingly affordable and effective. A proactive and layered strategy for storing, transferring and securing data is essential for keeping cyberthieves at bay. The foundation of that approach is a technology called “Managed File Transfer”. Paired with secure content engines and secure digital rights management, Managed File Transfer (MFT) is the optimal way to prevent data theft and cyber breaches. An MFT solution such as the class-leading GoAnywhere MFT keeps your organisation’s valuable data safe - at rest, and in transit. Coupled with an Advanced Threat Protection Bundle , it enables organisations to safely collaborate without exposing their systems or team to the risks of malware. This automated defence system protects your data in three important ways: 1. Prevents files containing malware from being shared. GoAnywhere with Advanced Threat Protection scans all inbound file transfers. It can also detect and automatically strip out active content like embedded malware, triggered executables, scripts, or macros used to extract or hold sensitive data hostage. This “sanitisation” of files and emails doesn’t delay delivery, even as it guards against today's leading malware and ransomware (e.g. CryptoLocker, CryptoWall, TorrentLocker, Dridex Dyre, BlackEnergy, etc.) and tomorrow's even more sophisticated threat variants. 2. Blocks sensitive data from being shared. Files with Personal Identifiable Information or other sensitive data can be prevented from being transferred. GoAnywhere with Advanced Threat Protection can inspect file contents, and then stop and block files from being shared, based on policies you define. 3. Redacts sensitive information from files before transfer. GoAnywhere with Advanced Threat Protection can ensure sensitive data is neither transmitted nor received, detecting and/or removing geotags, document properties, email addresses, and other metadata from documents, and replacing sensitive text with asterisks. Using Optical Character Recognition, it can even remove text contained in scanned images. “The only winning move is not to play” 6. In today’s interconnected business environment, ever-increasing cyber attacks are inevitable. However, foiling these attacks no longer requires your IT team to play a never-ending game of cyber security Whack-a-Mole. At Generic Systems Australia , we’ve helped hundreds of business leaders and IT teams across the Asia-Pacific region rest easy, knowing that their valuable data is protected by the automated sentries of GoAnywhere with Advanced Threat Protection. We can do the same for you. It’s surprisingly affordable, and our Migration Services mean you can keep running your business without disruption as we you transition to a more secure approach. In fact, we’re so confident in the capabilities and business case for our MFT solutions that we’re prepared to offer you a zero-cost Proof of Concept. If you’d like to take me up on this offer, or perhaps just discuss how your organisation’s file transfers can be made more efficient and secure, please feel welcome to contact me , Bradley Copson. I’m always happy to have an obligation-free discussion. At Generic Systems Australia , we’re your local experts in Secure Managed File Transfer. Sources: 1. Australian Signals Directorate Cyber Threat Report 2023 2. For example, Medibank Private’s share price plunged more than 20% in the weeks following its loss of the personal information of 9.7m Australians. 3. For example, Medibank Private is facing class actions by both shareholders and consumers alleging “breaches of the company’s duty of care to protect consumer information, manage risks and make timely disclosures to shareholders”. Optus Communications is also subject to a class action alleging “Optus failed to protect, or take reasonable steps to protect, the personal information of its current and former customers”. 4. For example, Optus Communications saw its customer growth halved in the quarter following its systems being breached. 5. Australian Financial Review 12 September 2022: “Cyber insurance premiums soar 80pc as claims surge”. 6. A quote from the 1983 John Badham film, “WarGames”. Previous Next