Cyber crime has been on the rise in Australia and New Zealand, and is likely to continue. Between July 2015 and June 2016, Australia’s Computer Emergency Response Team (CERT Australia) responded to 14,804 cyber security incidents affecting Australian businesses. Of these, 418 involved systems of national interest and critical infrastructure1. Preventing such attacks is vital to an organisation’s success and to the overall health of Australia and New Zealand’s information economy. A successful cyber defence plan hinges on a 360-degree approach and a relentless focus on business impact. Enterprises need well-trained employees who can react to clear-cut incident response plans and procedures for handling everything from a zero-day vulnerability (an undisclosed computer application vulnerability) to a large-scale, public breach. But they also must have the appropriate tools, and commitment from business for this to be successful. Best practices demonstrate what truly sets a good cyber security operating model apart. Find out more: www.accenture.com/operationaleffectiveness

1. CYBER SECURITY
IN AUSTRALIA AND
NEW ZEALAND:
HOW
OPERATIONAL
EFFECTIVENESS
IS KEY

2. STRATEGY AND TECHNOLOGY ALONE
DO NOT GUARANTEE AN EFFECTIVE
CYBER DEFENCE
The best strategy, supported by the latest technology,
can fail if not executed properly.
Risks to effective cyber defence include:
• Increased exposure to attack
(cloud, Internet of Things, connected devices)
• High turnover within security team
• Lack of visibility to critical assets
• Frequent IT changes not communicated
• Length of time taken to detect breaches
Copyright © 2016 Accenture. All rights reserved. 2

3. SHORTAGE OF CRITICAL TECHNOLOGIES
AND SKILLS HAMPER ORGANISATIONS’
SECURITY APPROACH
• Operations lack rigor and consistency
• Stakeholders remain unaware of their vulnerability
• Employees don’t follow standard security practices
• Security work generates “noise” that masks valid threats
• Out-dated tools and processes can limit effectiveness
of the security team
Copyright © 2016 Accenture. All rights reserved. 3

4. DRIVE IMPROVED SECURITY
OPERATIONS FROM ACTIONABLE
THREAT INTELLIGENCE
Steps that can create security operational excellence:
1. Assess effectiveness of current security processes
2. Invest in attracting and retaining skilled security talent
3. Automate intelligently to leverage scarce resources
4. Understand how threat data pertains to the business
5. Identify what isn’t known
6. Create a plan to address knowledge gaps
7. Find an effective sparring partner to improve security capabilities
Copyright © 2016 Accenture. All rights reserved. 4

5. CYBER DEFENCE STRATEGIES AND
SUPPORTING TECHNOLOGY WILL ONLY
WORK IF EXECUTED PROPERLY
Leading organisations focus on creating a highly efficient
operating model that balances security operations,
new technology implementation, testing of security
posture and feedback to update defences.
Strategy &
Business Alignment
Assessment &
Architecture
Governance, Risk
& Compliance
People & Culture Change
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
5Copyright © 2016 Accenture. All rights reserved.

6. ACHIEVING OPERATIONAL EXCELLENCE
IN CYBER DEFENCE REQUIRES A
COMPREHENSIVE APPROACH
Our model helps organisations prepare and protect for
threats, defend and detect breaches, and then respond to
and recover from incidents.
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
Strategy &
Business Alignment
Assessment &
Architecture
Governance, Risk
& Compliance
People & Culture Change
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
6Copyright © 2016 Accenture. All rights reserved.

7. START WITH A BIG-PICTURE STRATEGY
OF HOW SECURITY SUPPORTS
BUSINESS PERFORMANCE
• Forward-thinking capabilities to help
scale activities
• IT strategy that provides greater understanding
of assets, data sets, technical and
business functions
Strategy &
Business Alignment
Assessment &
Architecture
Governance, Risk
& Compliance
People & Culture Change
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
7Copyright © 2016 Accenture. All rights reserved.

8. FORWARD-THINKING CAPABILITIES
HELP SCALE ACTIVITIES EFFECTIVELY
• High-powered analytics to predict and detect incidents,
and identify behavior changes that indicate security risks
• Emphasis on visualisation to
identify anomalies
Strategy &
Business Alignment
Assessment &
Architecture
Governance, Risk
& Compliance
People & Culture Change
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
8Copyright © 2016 Accenture. All rights reserved.

9. CONCENTRATE ON INTELLIGENT
INCIDENT RESPONSE
• Platforms that guide operators in hunting for threats
• Train the same way the company fights attackers, to
prepare for real-world adversaries
Strategy &
Business Alignment
Assessment &
Architecture
Governance, Risk
& Compliance
People & Culture Change
Application &
Data Security
Platform &
Infrastructure Security
Digital Security
Vulnerability Management
& Threat Intelligence
Advanced Adversary
Simulations
Security Monitoring
Cyber Threat
Analytics
Incident Response
Remediation
9Copyright © 2016 Accenture. All rights reserved.

10. THE GOAL
Create a highly efficient operating model
that balances security operations, new
technology implementation, testing of
security posture and feedback to update
defences.
Copyright © 2016 Accenture. All rights reserved. 10

11. THANK YOU
For further information:
• Visit Accenture.com/operationaleffectiveness
• Follow us on Twitter @AccentureSecure
• Contact APAC Security Lead, Joshua Kennedy-White
Copyright © 2016 Accenture. All rights reserved. 11

12. ABOUT ACCENTURE
Accenture is a leading global professional services company, providing a
broad range of services and solutions in strategy, consulting, digital,
technology and operations. Combining unmatched experience and
specialized skills across more than 40 industries and all business
functions—underpinned by the world’s largest delivery network—
Accenture works at the intersection of business and technology to help
clients improve their performance and create sustainable value for their
stakeholders. With approximately 373,000 people serving clients in more
than 120 countries, Accenture drives innovation to improve the way the
world works and lives. Visit us at www.accenture.com.
Accenture, its logo, and High performance. Delivered. are trademarks of Accenture.
Copyright © 2016 Accenture
All rights reserved.