The owner of the Triple M and Hit radio network brands, Southern Cross Media Group, has opted to use Telstra Purple’s “CISO-as-a-service” programme.
According to the company’s announcement today [pdf], Telstra Purple was hired in February of this year “to deliver an outsourced chief information security officer (CISO) function.”
According to the business, “this arrangement is assisting us in strengthening our processes and controls to protect our systems and confidential data.”
The CISO will keep testing and improving our systems and procedures to make sure SCA (the organisation) is aware of new cyberthreats.
The media group’s information security management system is “undergoing” a “independent evaluation,” the firm claimed, with the help of Telstra Purple.
The company stated that numerous important task packages, including business impact analysis, information risk management framework, asset discovery, threat assessment, risk assessment, and current controls assessment, will be carried out as part of the thorough study.
“This review will produce an updated information security risk register, thorough IT asset registers, and a gap assessment of our cyber security controls, which will inform the benchmarking of our cyber security controls and determine the areas that need the most attention and funding in the future.”
In the most recent financial year, Southern Cross Media Group experienced two data breaches involving outside providers.
Its “preferred direct marketing platform” was engaged in the first incident, which led to the compromise of “subscription email addresses.”
The company stated that it had “chosen a successor direct marketing platform, which will go live in the second half of 2022,” indicating that the incident was apparently sufficient to prompt a platform transition.
In the second incident, which happened in January of this year, “personal information of a small number of Triple M club members” was made public thanks to an email link to a third-party survey.
