Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search

 

InternetNZ weighs in on Z Energy data breach

28 June 2018

InternetNZ believes the Z Energy data breach provides a useful lesson for them, and other organisations.

Ben Creet, Policy Manager at InternetNZ and author of New Zealand’s guidelines of security vulnerability disclosure says, “Once the media get involved in a security breach like Z Energy have had, there has been a failure of processes to disclose and fix a vulnerability.”

Firstly, this is a data breach. That’s why it’s important that the Privacy Bill and it’s mandatory data breach reporting regime is enacted. New Zealand needs to collectively lift it’s game when data breaches happen. The default position should be to tell your customers when a breach occurs.

If people are finding vulnerabilities and data breaches in New Zealand organisations websites and services you should report to CERTNZ, they are the experts and have the mana to get organisations attention. You can report a vulnerability to CERT here: https://www.cert.govt.nz/it-specialists/guides/reporting-a-vulnerability/

Additionally, we think that more New Zealand organisations should have their own vulnerability disclosure policies. The New Zealand Internet Task Force released guidelines about how to report, and receive information about security problems in 2013: http://www.nzitf.net.nz/pdf/NZITF_Disclosure_Guidelines_2014.pdf



We run a disclosure policy for the .nz registry (here) and organisations like SkyTV, Vend and even the Office of the Privacy Commissioner have their own policies to encourage reporting directly to their security experts.

InternetNZ will be reaching out to Z Energy on how they can implement a disclosure framework so that vulnerabilities are identified and fixed in a safe, collaborative timely manner.


ends

© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

Tax Bill Passes, Drops: “An End To Unnecessary Secondary Tax”

“The changes mean Inland Revenue will more closely monitor the tax paid by wage and salary earners through the year. If it appears the worker is being over taxed, Inland Revenue will suggest a more suitable PAYE tax code tailored to that worker.” More>>

ALSO:

Ethiopian Airline Crash: Boeing 737 Max Aircraft Operations Temporarily Suspended

New Zealand’s Civil Aviation Authority has suspended the operation of Boeing 737 MAX aircraft to or from New Zealand. Currently this affects only one operator, Fiji Airways. There are no other airlines that fly this aircraft type to New Zealand. More>>

ALSO:

Sorting Out DNA: Crime-Busting Software Wins Top Science Prize

Software developed in New Zealand that has contributed to identifying suspects in tens of thousands of criminal cases around the world has won the 2018 Prime Minister’s $500,000 Science Prize. More>>

ALSO:

In The High Court: IRD Wins Tax Avoidance Case

Inland Revenue has won a High Court case against Eric Watson’s Cullen Group over a nearly $52 million tax debt. More>>

ALSO:

Insurers Withdraw From Market: Plea For EQC Rethink

A consumer watchdog wants the government to rethink the Earthquake Commission (EQC) as more people are pushed out of getting property and contents insurance. More>>

ALSO:

Women's Day: New Zealand Rated Third Best In OECD For Working Women

New Zealand has been rated among the top countries in the world for working women. The Women in Work Index rated New Zealand third in the OECD and it was the only country outside Europe to make the top 10. More>>

ALSO: