Sean Duca
- Vice President, Regional Chief Security Officer - Asia Pacific & Japan, Palo Alto Networks
Asia–Pacific (APAC)
As seen in:
Forbes,
MSN India,
ETCISO,
India Times,
The Times of India,
Mint,
Computerworld Australia,
Financial Express,
CSO,
The Business Times (Singapore)
and
Co-Founder & CEO, getsoteria.ai. Deciding what AI may do in the SOC, and proving it afterwards.
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Sean Duca
Op-Ed: Unmasking the threat - Data poisoning in AI-driven cyber security and business automation
Generative AI’s increasing prominence in Australia promises a transformative impact on businesses, especially given the technology’s potential to facilitate well-informed decisions, streamline operations, and enhance profitability. The surge towards artificial intelligence (AI) adoption is undeniable, bolstered by projections that AI will inject $115 billion annually into Australia’s economy by 2030 and supported by the Australian government’s $41.2 million backing.
The quantum threat to cybersecurity
Amidst a slew of large-scale cyberattacks in India, and with the national digital economy set to hit USD 800 billion by 2030, the need for shoring up domestic cybersecurity, much like the monetary incentive for cybercriminals, is stronger than ever. The GoI’s allocation of INR 625 crores towards cybersecurity infrastructure comes at a time when the threat landscape is growing increasingly resilient to modern solutions.
Data security via quantum computing
THE Philippines is gearing up to advance its digital transformation. Bills such as the E-Governance Act, the Internet Transactions Act and tax reforms are being reviewed to accommodate digital service providers and foster an environment that would ease the adoption of emerging technologies. As a result, businesses will be empowered to integrate technologies that contribute to higher economic growth and improve the quality of life for Filipinos.
ChatGPT: Looking at both sides
Over the course of many generations, humankind has reaped enormous rewards from the advancements made possible by science and technology. How can the relentless pursuit of knowledge be viewed as bad? But the truth is that any tool can be used for good or bad, depending on the people who wield it. This pursuit, fuelled by our curiosity has brought us to a point where we are trying to decipher and mimic the human mind.
India Cybersecurity Predictions for 2023: Palo Alto Networks
- Advertisement -- –By Sean Duca, VP and Regional CTO, APAC and Japan, Palo Alto Networks Palo Alto Networks, the global cybersecurity leader, released its cybersecurity predictions for 2023 – 5 key insights from our leaders to help organisations ensure a more secure future. Over the course of 2022, enterprises across industries and regions saw an increased incidence in cyber-attacks thanks to new, extremely disruptive threats.
Why Indian MSMEs Must Rethink Cybersecurity
The Indian Micro, Small & Medium Enterprises (MSME) sector comprises over 6.33 crore enterprises, whose contributions make up for about a third of India’s GDP. While the numbers may be impressive, MSMEs are still in the infancy of their post-pandemic digital transformation. Additionally, as their reliance on digital platforms increases, shoestring budgets force them to rely on legacy cybersecurity solutions that are unfit to deal with rapidly adapting cyber threats.
How To Stay Safe From Online Fraud And Protect Your Digital Assets Original
The average thief isn’t on the streets or in train stations anymore; but is online. A recent report by ACI Worldwide found that attempts of digital fraud have been on the rise. The report stated that the share of suspected fraudulent digital transaction attempts originating from India increased by 28.32 per cent over the 12 months ending March 2021 compared with the previous 12 months. Most recently, a woman from Madhya Pradesh lost close to ₹40,000 as a hacker gained access to her digital wallet.
ET-Insights
To protect their customers, Financial Institutions must prioritise API security. Greater reliance on digital services presents more opportunities for cybercriminals to carry out identity theft, fraud, and unauthorised data collection. Therefore, to protect their customers, financial institutions must prioritise API security. Intensified competition from digital natives and nimble new-aged fintechs has forced legacy banks and traditional financial institutions to reinvent themselves.
Getting ready for 5G
As Australia’s government agencies prepare for 5G, don’t forget security, writes Sean Duca. 5G promises transformative mobility and connection speeds we’ve never seen before. While the benefits are notable, as government agencies across Australia prepare for 5G connectivity, they must evaluate their infrastructures for 5G preparedness. Existing practices and legacy security solutions will not meet what’s needed to secure 5G.
Quattro lezioni di cybersecurity per il 2021
Da un punto di vista umano, il COVID-19 continua a essere un evento tragico globale. Tutti non vediamo l’ora che arrivi il giorno in cui potremo tornare a vivere normalmente. Dal punto di vista del mondo digitale, la pandemia ha dato una rapida accelerazione a numerosi trend. Nell’ultimo decennio circa, il lavoro a distanza era già diventato popolare per alcune attività e lo stesso vale per la didattica a distanza. Popolare, ma non ancora pervasivo.
Data Security: The growing importance of data privacy Original
The debate around how data is stored, accessed and used is not set to disappear in 2021 The value of cloud computing becomes less cloudy. By Sean Duca With the Covid-19 impact likely to be felt for years, businesses are having to relook at their strategies to navigate the new normal in the longer term. With increased dependence on technology, how successfully are businesses securing their digital future? Here are our cybersecurity trend predictions for 2021.
Quatre leçons de cybersécurité pour 2021
D’un point de vue humain, le COVID-19 reste une tragédie mondiale. Nous guettons tous le moment où nous pourrons reprendre le cours normal de nos vies. Du point de vue de notre monde numérique, cette pandémie a été un accélérateur de nombreuses tendances. En effet, durant la dernière décennie, le travail à distance s’est popularisé dans certaines branches professionnelles. Tout comme l’apprentissage à distance. Ils se sont popularisés, sans se généraliser.
4 Cybersecurity Lessons for 2021
Dec 22, 2020 / by Sean Duca From a human standpoint, COVID-19 continues to be a tragedy globally. We all look forward to a day when we can once again go about living our lives normally. From the perspective of our digital world, the pandemic has been a rapid accelerator of many trends. Over the past decade or so, remote work had become popular for certain types of work. The same with remote learning. Popular, but not pervasive. What had been privileges pre-COVID, however, have now become necessities.
Supply chain remains the weakest link in cybersecurity | Technology | Supply Chain Digital
Supply chains present a weak link for cybersecurity because organisations can’t always control the security measures taken by supply chain partners. S... Supply chains present a weak link for cybersecurity because organisations can’t always control the security measures taken by supply chain partners. Sean Duca, Vice President and Chief Security Officer of Palo Alto Networks explores the ways in which cybercriminals can attack an organisation by first infiltrating a supply chain partner.
Demystifying SD-WAN
Connectivity has been the key driver behind SD-WAN; moving forward, security will be the driver; with the right tools IT and security teams can gain holistic visibility & control over connectivity.
5 Cybersecurity Issues to Address in the Asia-Pacific Region
As technology develops, the cybersecurity industry faces shifting challenges and opportunities. As a global cybersecurity company, we’re always working to identify key areas of focus for different regions. Here are some of the major cybersecurity issues we see on the horizon for the Asia-Pacific region. Today’s 4G problems are setting the scene for 5G.
The growing importance of IoT security
The value of the Internet of Things (IoT) devices being used in homes reached more than $1 billion in 2019 and is forecast to reach $5.3 billion by 2023, according to industry analyst Telsyte. This wholehearted embracing of IoT by businesses and consumers alike means that Australia will be awash with IoT devices in the next few years. The benefits are enormous, opening up opportunities to increase safety, productivity, and convenience.
Today’s 4G problems are setting the scene for 5G - ET CISO
By-Sean Duca According to Gartner, worldwide 5G wireless network infrastructure revenue is expected to reach $4.2 billion in 2020 – an 89% increase from 2019 revenue of $2.2 billion. While widespread adoption of 5G is still far away, the launch of early 5G trial services in Australia, Singapore and South Korea have already begun. However, before considering the rollout of 5G, 4G networks today are still susceptible to cyberattacks.
Debunking IT security misconceptions
Most businesses are now aware of the crucial need to protect their networks and systems against intruders and cybercriminals. However, many business leaders are still operating under IT security misconceptions that could put their organisation at risk. There are nine IT security misconceptions that can create risk for businesses: 1.
Are Smart Grids Fully Protected Against Cyberattacks?
When I was a kid, one day I saw a strange man lurking around the side of our house. I was home alone after school, and as my mother trained me, I picked up the phone and called her at work to let her know about this dangerous stranger peeking around the property. She slammed down the phone, jumped in her car and sped home. But when she got here, she heaved a sigh of relief when she realized the stranger was simply an electrical utility technician reading the electrical meter.
Phishing still remains one of the biggest cyber threat for organisations
Phishing attacks remain prevalent and are a pressing reason for organisations across all industries to remain assertive and up to date in their cybersecurity practices. Phishing attacks can bring organisations to their knees, with cybercriminals often able to rely on simple tricks to break into email accounts and networks.
Treat Cybersecurity as a Strategic Investment, Not a Sunk Cost
How do you measure the value of your investment in cybersecurity? How is that value reflected in the way cybersecurity is built into both your management structure and corporate culture? I pose these critical questions based on a couple of recent experiences and observations.
Phishing Isn't Going Away. Here's How to Not Fall Prey.
Phishing attacks remain in the news. ZDNet reported last week that a prolific phishing operation—which already had a list of 50,000 CEOs, CFOs and other high-level executives—has expanded with a new database of additional targets. Separately, the UK’s 2019 Cyber Breaches Security Survey revealed that phishing remains the country’s top cybersecurity threat, cited by 80% of businesses and 81% of charities. It has been more than 20 years since phishing became part of our collective consciousness.
Cyber Risk: What Questions to Ask – and How to Ask Them - SecurityRoundTable.org
The days are long gone when board members could take a passive approach to cybersecurity. If you sit on a board, you have a fiduciary responsibility to help set the agenda for cybersecurity and exercise proper oversight to minimize overall risk to the organization. In order to provide that oversight, you must feel comfortable having “risk conversations “with your business and cybersecurity leaders, as well as your peers at the board level.
The security trends Australian businesses need to be aware of in 2019
Cybersecurity will continue to be a key business focus for organisations in 2019 and beyond, with ongoing risks showing no signs of abating. Security professionals and cybercriminals continue to play a cat-and-mouse game in which each new innovation is quickly met with an equal and opposing force, with neither group gaining a clear ascendancy. 2018 saw some decisive measures around the globe aimed at reducing the effects of security breaches.
Practical Ways to Comply With Mandatory Notifiable Data Breach Legislation
Most organisations are now aware of the federal government’s mandatory notifiable data breach (NDB) legislation and the penalties associated with failing to comply. Essentially, the scheme aims to give individuals more control over their personal data, so it requires certain businesses to report breaches of that data to the individual concerned as well as to the Office of the Australian Information Commissioner (OAIC). Failing to report a breach can result in financial and civil penalties.
Shore up your data: ways to comply with mandatory notifiable data breach legislation
Most organisations are now aware of the federal government’s mandatory notifiable data breach (NDB) legislation and the penalties associated with failing to comply. Essentially, the scheme aims to give individuals more control over their personal data, so it requires certain businesses to report breaches of that data to the individual concerned as well as to the Office of the Australian Information Commissioner (OAIC). Failing to report a breach can result in financial and civil penalties.
Four cyber security predictions for 2017
2016 was a challenging year for organisations particularly as cyber adversaries achieved high-profile success, mainly with ransomware. Being aware of security concerns doesn’t mean avoiding new technology altogether. It’s about being sensible and trying to stay ahead of cybercriminals by understanding current and potential threats and what can be done to mitigate the risk. Here are four predictions for 2017.
How businesses should prepare for Australia’s new data breach laws
How businesses should prepare for Australia’s new data breach laws Australia, like other countries, has not been immune to data breaches in which personal information has been exposed. The much-anticipated Privacy Amendment (Notifiable Data Breaches) Bill 2016, whereby organisations will be legally obliged to disclose data breaches, has been passed by the Australian Federal Government, and the laws will come into effect within the next 12 months.
Meet the judges: John Banfield, CEO of BPAY Group
Each judge on the panel of The CEO Magazine’s Executive of the Year Awards needs to understand the role that innovation and creativity plays in recognising the success of Australian executives. As the CEO of BPAY Group, John Banfield is therefore an ideal candidate for the panel. BPAY Group leads the country in terms of digital financial transactions. Recognised as giants in its field by a majority of Australians, BPAY Group continues to revolutionise the industry.
How to better prepare your cyber breach response
Too many companies are failing to respond to cybersecurity incidents with carefully-considered, strategic responses. Breaches can happen shockingly fast with little time to react but that’s no excuse for businesses to respond poorly. In this digital economy, where businesses are operating 24/7, 365 days a year, cybercrime, cyberactivism, and cyberespionage can happen at an unprecedented pace, scale, and reach. Organisations can have data stolen, disrupted, or destroyed in a matter of minutes.
Security Boulevard
When you think of recent breaches, you wonder about the company’s preparedness and how they handled the communication process with customers, employees, regulators and the government. Today, cyber risk is a real challenge and it should be treated as a business issue rather than a technology issue. No data breach should come as a complete surprise; rather, as a foreseeable event for which you are completely prepared.
Time for the good guys to learn from cybercriminals
IN RECENT years, cybercrime has produced one of the most collaborative and efficient marketplaces in the world on the Dark Web. The rise of exploit kits and, more recently, cybercrime-as-a-service, have significantly lowered the cost of individual cyberattacks. This lowers the bar for even
Palo Alto NetworksVoice: It's Time To Move Beyond Passwords -- Even StR0n& Ones
By Sean Duca, Vice President and Chief Security Officer, Asia Pacific at Palo Alto Networks According to a recent article in the Wall Street Journal, the man who literally wrote the book on password management, Bill Burr, admitted that the password as primary protection is no longer valid. Burr was the author of a 2003 report that recommended using numbers, obscure characters, and capital letters, along with regular updating, for increased security.
Cyber Risk Management simplified: Your business is your kingdom
One of the big misconceptions about cyber security is that organisations can maximise protection by focusing their attention—and investments—predominantly on protecting the headquarters environment and physical network. In today’s era of remote workers, mobility and workplace transformation, executives who embrace this centralised approach may be undermining or missing imminent risks at their network perimeters.
Time for Asian businesses to ramp up their cyber security defences, Editorial - THE BUSINESS TIMES
Pair your daily business read with the perfect cup of espresso. Subscribe to The Business Times today to receive your very own Nespresso Inissia coffee machine worth $188. Find out more at btsub.sg/btdeal
The cost of a new website revealed: Tim Barnett, 2BInteractive
“We’re web developers – we’re not business coaches or business development coaches. But at the end of the day, we sometimes are involved at that level because your website is so key to your business.” Indeed, website architecture can be a costly and time-consuming endeavour. Tim joins the My Business team to discuss the importance of having a business strategy and how having a plan in place helps web developers produce an end result that is satisfying to all.
6 ways meditation makes you a better businessperson
My path to becoming a social entrepreneur was an accidental one. As a doctor specialising in the field of psychiatry, I turned to meditation to manage the stress of my work. It took a while before I was sold on it, though. Like many people who are driven to create and make things happen, I used to wonder why anyone would “just sit there” doing meditation. As a compulsive doer myself, sitting down to meditate was profoundly challenging. Where was the productivity in that?
Digital ways to pay - why should SMEs bother?
If someone had told you 10 years ago that we would be producing invoices on our phones, you would have laughed, especially when we were all working on Blackberries. Roll forward to 2017 and so much has changed! With businesses and start-ups all over Australia looking for ways to compete on the world stage, getting paid faster than you were yesterday will always put you in front. There is no doubt every business needs to embrace the benefits of modern payment technologies into their operation.
Are customers really too busy to give you feedback?
Everyone claims to offer the best customer service in their local area or particular industry. Yet what constitutes “the best” is up to customers to determine – not business owners and their employees. So without capturing customer feedback rigorously and efficiently, how do you really know how your service offering stacks up? Is it really better than your competitor down the road? Are there things you could be doing better but don’t even realise it?
Can’t remember what you forgot? Instant ways to boost your memory
Memory problems are commonly thought of as a problem relating to older age. The somewhat depressing news published in the British Medical Journal in 2012, however, revealed cognitive decline starts in our 40s and 50s, indicating it’s never too early to be putting in place ways to help preserve cognitive function. With stress now identified by 80 per cent of Americans as the most common workplace challenge, identifying ways to boost memory and cognition is becoming increasingly urgent.
Shark Tank’s Steve Baxter talks tech in business
Speaking with My Business ahead of his presentation at the recent Intuit Australia’s QuickBooks Connect conference, Steve says it is important for businesses owners to be measured in their approach to incorporating new technologies into their business. Some, he says, can be a lifesaver in the financial and time savings they deliver, while others are greatly overhyped in their ability to bring meaningful efficiencies.
Think hacking doesn’t affect you? Think again!
A Perth-based real estate agency has had its computer systems hacked, resulting in scammers publishing fake rental ads. The fake advertisements and the email address used by the scammers, This email address is being protected from spambots. You need JavaScript enabled to view it. , are in the process of being removed online by Perth’s Department of Commerce.
Shark Tank judge reveals top business strategies
The serial entrepreneur and investor, who is now a household name thanks to his spot on the judging panel of Channel 10’s hit show about start-up businesses pitching for investment, says the advice he wants to pass on are lessons that he learnt through his first accountant. “He gave me three pieces of advice,” Steve (pictured) tells My Business.
The training dilemma: will it deliver a return?
Of course everyone provides basic training on the products and services offered by the business – how to operate internal systems and processes, etc. But more in-depth, detailed – and hence expensive – training is often only reserved for long-term or very senior employees, if at all. Yet as Jules Peacock, founder of high-end Sydney salon Lily Jackson Hair & Makeup, explains, not training your employees well can actually cost you more – through lower sales volumes and poorer staff retention.
Tips to prepare a business for sale
If you are in business, you are generally doing everything you can to keep your head above water, service your customers or clients and bring money into your business. Preparing for the sale of your business is a vital aspect of any business owners’ journey through the lifecycle of their business. Yet it is so often something that is missed.
Avoid these 6 common digital marketing blunders
After interviewing more than 40 of my clients, from small businesses through to corporations, I noticed a pattern emerging with the types of problems or concerns they were having with their digital and social media activities. Often the mistakes they were having could have been remedied by being willing to invest in the right channels and strategies to begin with. So, what stopped them from setting their business (or marketing/digital/social) strategies up properly?
Don’t think disruption is a new concept!
Serial entrepreneur and founder of BridgeClimb Sydney, which operates climbs up the Sydney Harbour Bridge, explains that the history of the bridge itself demonstrates that disruption has long been a part of human history and evolution. “When you think about 1926 when we built that bridge, there was only a million people in Sydney.
Getting workers to win the war against cyber crime
Whether through innocent mistakes or because they were targeted for their access to sensitive information, employee error can easily open the door to malware or information theft. The spread of the WannaCry ransomware that recently debilitated hospitals, businesses and government departments across the globe has amplified awareness of such threats. Successful attacks often involve poor processes and exploit human tendencies.
How businesses should prepare for Australia’s new data breach laws
How businesses should prepare for Australia’s new data breach laws Australia, like other countries, has not been immune to data breaches in which personal information has been exposed. The much-anticipated Privacy Amendment (Notifiable Data Breaches) Bill 2016, whereby organisations will be legally obliged to disclose data breaches, has been passed by the Australian Federal Government, and the laws will come into effect within the next 12 months.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Sean
Contact Sean, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack