Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search


Red versus blue: the battle of IT security

Are you backing the right team?

When it comes to data security and protection, the common misconception is that New Zealand is ‘safe’ at the bottom of the world. While New Zealanders live a fairly sheltered existence south of the equator, unfortunately when it comes to cyberattacks, it’s not a matter of if – but when.

On Thursday 3rd October, security experts Advantage hosted an industry event – Red vs Blue team: which IT security team do you back? While you could be mistaken for thinking it was a foosball competition or military drill, the purpose of the event was to educate IT professionals working in small to medium-sized New Zealand businesses, about the very real threat of cyberattacks – and how they can protect themselves.

“To think that we’re not a target is naïve,” says Advantage’s newly appointed regional executive Steve Smith. “In fact, that makes us a very easy target. We set up the event to show what the Red Team does in a good way, but also that there are people out there who follow and use the same techniques in a bad way – and they’re constantly trying to use brute-force attacks to hack networks around the world.”

Red Team: if your network was compromised, would you know?

Representing the ‘Red Team’ was Brett Moore from Insomnia Security. Since starting his company over a decade ago, Brett has performed hundreds of assessments for clients across a wide range of industries.

Red Teams work by simulating real-world network attacks, providing a realistic assessment of an organisation’s ability to protect against and respond to network breaches.

He explained how Red Teams differ from standard penetration testing by working towards meeting a goal or objective, making use of a wide range of tactics, techniques and procedures to leverage access into any part of a business. Using this simulated, controlled exercise – gives security teams a chance to practice detecting and responding to attack within a production environment.

“When engaging with a Red Team, you need to be open to setting minimal scoping restrictions. Anything goes with real attackers – so the Red Team needs the same freedom,” says Brett.

Blue team: don’t wait, be prepared

If the job of a Red Team is to break in, then it’s the job of a Blue Team to keep attackers out. Managing director at Advantage, Brad Pearpoint has 13 years’ experience in designing, implementing and maintaining critical infrastructure, and has been a key pillar of Advantage’s security services development.

Brad spoke to the value of having a Blue Team involved to monitor your networks 24/7, implementing the technologies, threat intelligence, people and processes to stop threats from coming in the door. And by the sounds of things, the Blue Team is needed now more than ever. For businesses in the APAC region, it takes on average 1000 days before a cybersecurity breach is found, often referred to as ‘dwell time’. That’s just under three years!

“New Zealand businesses kind of have their head in the sand but the reality is, it’s happening to organisations all the time – they just don’t know yet,” says Brad.

Privacy and GDPR changes

To round out the conversation, Richard Wells discussed the new privacy bill due to come into force in 2020. A commercial lawyer with more than 20 years’ Richard has experience in the technology, privacy, IP and media fields across several jurisdictions. He assists companies with their privacy compliance obligations and has helped companies manage, assess and respond to significant privacy breaches.

Richard also outlined the responsibilities of New Zealand companies to protect data and outline the process when data has been breached. He also discussed the new GDPR regulations being enforced overseas, the financial penalties that come with those regulations.

“In the lead-up to 2020, New Zealand businesses should be putting systems and processes in place to identify data breaches, have a clear, written plan, and implementing privacy risk assessment and ‘dashboarding’.”

Are you ready for a breach?

Steve has some last advice to businesses. While red is used to describe the ‘bad guys’ and the blue team defend, the most effective approach for SMEs and midmarket businesses is to allow the two teams to work together (or against each other, as the case may be).

“Don’t be afraid of investing in security – it’s not worth the financial repercussions or the bad publicity if you don’t,” says Steve. “People like you and I want to know that businesses are taking every precaution to ensure our data is secure.

“If your business doesn’t have the in-house skills to implement security measures, seek specialist help. This is what we do, and we can give you that peace of mind that someone is watching your network 24/7.”

More Red vs Blue events

Advantage will be hosting another event in this series shortly in Auckland and Wellington. The company has 35 years’ experience in the IT sector, starting out in 1984 manufacturing PCs for health boards, government agencies and commercial environments. In 2000, they transitioned to a service-based business as a systems integrator, then in 2008 opened a tier 3 datacentre in response to ‘the cloud’ and shared services. 2012 saw significant investment in security services and since then, the company has been focused on developing a unique external security service – tailored to suit businesses of all sizes.

To find out more and keep up to date with event dates, visit Advantage’s website.

© Scoop Media

Business Headlines | Sci-Tech Headlines


Mining: OceanaGold Announces Receipt Of WKP Mining Permit

MELBOURNE, Australia, Aug. 6, 2020 /CNW/ - OceanaGold Corporation (TSX: OGC) (ASX: OGC) (the 'Company') is pleased to announce it has received the mining permit for Wharekirauponga ('WKP') on the North Island of New Zealand. ... More>>


Economy: COVID-19 Lockdown Has Widespread Effects On Labour Market

In the June 2020 quarter, the seasonally adjusted unemployment rate fell to 4.0 percent, down from 4.2 percent last quarter, while underutilisation rose, Stats NZ said today. More>>


NZ Post: New Research By NZ Post Shows Online Shopping Grew 105% In Alert Level 3

New research by NZ Post into how the COVID-19 response has impacted the way Kiwis shop online, shows online shopping increased 105%* when the country moved into Alert Level 3, and may have changed the way Kiwis shop permanently. Online spend peaked ... More>>


Banking: Westpac NZ Lowers Merchant Fees For Small Businesses

Westpac NZ is rolling out a new merchant fee pricing structure that will lead to cost savings for more than 10,000 small and medium Kiwi businesses, and could make contactless transactions more widely available for customers. On 1 September, most ... More>>

REINZ: Million Dollar Plus Property Sales Increase 11.7% Nationally

The number of properties sold around the country for one million dollars or more during the first half (H1) of 2020 increased by 11.7% compared to H1 2019, with 5,426 million-dollar plus properties sold (up from 4,858 in H1 2019) according to the Real ... More>>

Waste: Government To Regulate Plastic Packaging, Tyres, E-Waste

The Government is stepping up action to deal with environmentally harmful products – including plastic packaging, tyres and e-waste – before they become waste. As part of the wider plan to reduce the amount of rubbish ending up in landfills, ... More>>


Antarctica NZ: Ice-Olation

Antarctica New Zealand is gearing up for a much reduced season on the ice this year and a very different deployment to normal! Before they head to one of the remotest places on the planet, all personnel flying south with the New Zealand programme will ... More>>


QV Valuations: July House Price Index Illustrates Market Resilience

According to the July 2020 QV House Price Index (HPI) results out today , property values recorded a marginal increase, up 0.2% over the month. This is somewhat of a turnaround from June, after the national index edged 0.2% lower. More>>


Property: Queenstown Rents Experience Biggest Drop In Seven Years

Rental prices in the Queenstown-Lakes district saw the biggest annual percentage drop in seven years after falling 28 per cent on June last year, according to the latest Trade Me Rental Price Index. Trade Me Property spokesperson Aaron Clancy said ... More>>

Seismology: The Quiet Earth

As many daily activities came to a halt during lockdown, the Earth itself became quiet, probably quieter than it has been since humans developed the technology to listen in. Seismologists have analysed datasets from more than 300 international ... More>>

RNZ: James Shaw Says Kiwibank, Not Ministers Should Decide On Investors

Climate Change Minister James Shaw says Kiwibank's decision to stop doing business with companies dealing in fossil fuels is the right one. More>>


FMA: Kiwis Confident Financial Markets Will Recover From COVID-19, Plan To Increase Investments

Despite the majority (60%) of investors experiencing losses as a result of COVID-19, the outlook on investing remains positive, according to a Financial Markets Authority (FMA) survey. Most Kiwis (71%) were optimistic that the pandemic will pass eventually ... More>>

FIRST Union: Warehouse Using Covid For Cover As Extensive Restructure Makes Everyone Worse Off

(FIRST Union comments on The Warehouse consultation and proposed restructure) 'Unfortunately the Warehouse have done the disappointing thing and used Covid-19 to justify a bunch of operational business decisions that will leave hundreds of workers without jobs ... More>>