Cyber Security Risks for Energy Businesses
The Optus data breach has focused the attention of executives of energy businesses on cyber security. Cybersecurity threats have increased in intensity and frequency over the past few years, and all utility providers should be re-examining their cyber resilience. There are both general and industry specific regulatory obligations that apply to energy businesses. Understanding applicable regulatory obligations is a critical component of any assessment of cybersecurity risk. Regulatory & Legal Obligations relating to cybersecurity Within the Privacy Act, the Australian Privacy Principles set out how businesses must collect, manage, store and disclose personal information. Personal information is defined in the Privacy Act as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the…
