Techquake
At the gates - how to survive the era of cyber security

Under siege

"There are three main trends businesses are contending with," says Andrew Moir, who is global head of HSF’s cyber and data security practice. "An increasing legislative burden, a more contentious environment following cyber incidents, and an increased focus on individual liability. All companies are affected by these issues in one form or another."

The legislative angle is increasingly complex in jurisdictions across the globe. In the UK, for example, from the Computer Misuse Act in 1990 and the EU Data Protection Directive of 1995 through to the Security of Network & Information Systems Regulations in 2018, the UK's General Data Protection Regulation (GDPR) in 2021 and the upcoming EU AI Act, business is wrestling with a myriad of government interventions impacting digital security. In the US, the White House has published its National Cybersecurity Strategy, looking to improve cyber investments and risk allocation. The Australian Government is also developing the country’s cyber security strategy, foreshadowing material legislative reform.

"A lot more legislation comes through than is repealed, so you end up with an ever-increasing burden on businesses," adds Moir. "Plus, cyber security is a multinational issue, which means you have to deal with multiple regulatory regimes across the jurisdictions you operate in. And those regulatory regimes typically require different things. It becomes a minefield."