'Unsustainably Sustainable' by Dr Carl Ungerer and Vanessa Liell at Mumbrella CommsCon 2023

•

0 likes•27 views

This document discusses sustainability and the risks it poses to organizations. It begins with defining sustainability as anything that threatens long-term business sustainability, focusing on environmental, social and governance (ESG) factors. The document then notes that overblown sustainability claims can lead to greenwashing accusations. It presents a case study on cybersecurity risks, calling it the number one governance issue and noting that failures to protect data will face regulatory, legal and reputational consequences. The document concludes by advising communicators to partner with experts, separate communication from technical issues, ask hard questions to verify facts, and avoid sustainability pitfalls.

Marketing

Unsustainably Sustainable
How to avoid the pitfalls &
become true sustainability experts
Vanessa Liell
Partner & Co-founder
Dr Carl Ungerer
Managing Partner

Dr Carl Ungerer Vanessa Liell
Advises CEOs and boards on political, national and
cyber-security risk including cyber-security simulations.
Also...
Career diplomat with DFAT
Intelligence analyst & State/Federal political advisor
Global expert on national security and cyber-security
Widely published author
Advises CEOs and boards on reputational risk
specialising in corporate affairs and issues & crisis.
Also...
Co-founder of creative venture Rethink Everything
Co-founder of Herd MSL
Non-executive director
Casual Academic in Strategic Communications at UTS
Introducing.........
Unsustainably Sustainable

Sustainability: practical definition and the
Australian landscape.
1
2 Expert case study: the risk cybersecurity
poses to organisation's sustainability.
3 Implications for communicators: risks and
opportunities in sustainability consulting
and advisory.
Today's
presentation
Unsustainably Sustainable

What is sustainability?
Practical definition
Sustainability is defined as anything
that threatens the long term
sustainability of a business.
The focus has been on ESG –
environment, social & governance.
Improving ESG outcomes protects
reputation, attracts and retains
employees and improves investment
opportunities.

What is the risk to communicators?
Australian landscape
Overblown and unsubstantiated ESG
claims are leading to accusations and
increasingly prosecutions for
greenwashing.
This poses a major challenge for
companies' reputations, and
potentially the bottom line.
How companies navigate these issues
are increasingly difficult.

The greatest current ESG risk is "G"
Case study: Cybersecurity risk
Cybersecurity is now the number one
governance issue for boards and CEOs.
This year we will see several more
attacks on major brands in Australia.
The government has put boards on
notice to act now on cyber or face
regulatory and financial penalty.

Boards are increasingly exposed
Case study: Cybersecurity risk
ASIC has already prosecuted a
financial services company for lack
of preparedness.
Companies that fail to protect data will
face the triple whammy of government
regulation, legal class actions and loss
of consumer confidence.

The scale of cyber-security risk
Case study: Cybersecurity risk
Ransomware is old news AI is unknown territory Russian based
cyber-gangs

The scale of cyber-security risk
Case study: Cybersecurity risk
"Despite Western intelligence agencies
continuing to call out, by name, many
of the state-sponsored threat actors,
and placing sanctions on government
officials and associated agencies
involved in these operations, there is
no sign that cyber attacks have
diminished. In fact, they are
getting worse."

Questions for communicators
Implications for corporate affairs and PR agencies
How well is your company prepared
for issues and risks related to ESG?
Have you prioritised the issues that
are likely to cause the greatest
reputational and commercial risk?
Do you know exactly what your
company does and what it says it
does? Is there any difference?
Have you independently checked the
facts? How would you do that?

HorizonBlue is an Australian cybersecurity
simulation offering.
Created as a partnership between Horizon GR and
specialist financial services firm BlueChip
Communications.
Combines global cyber-security frontline experience
with specialist issues and crisis preparedness.
Addresses Australian company's requirements to
ensure boards and executive teams are
operationally prepared for a cyber-attack.
Innovate your offering
Implications for corporate affairs and PR agencies

Partner with experts in the areas you
are advising.
Separate communication issues from
technical issues (that require specialist
expertise).
Don't assume - ask the hard questions
and interrogate & verify the facts.
How to avoid the pitfalls
Implications for corporate affairs and PR agencies

Thank You
1
Vanessa Liell
Partner & Co-founder
Dr Carl Ungerer
Managing Partner

The COVID-19 pandemic challenged organizations' security operations in significant ways by shifting workforces largely to remote environments. This changed the typical infrastructure topology protections and required a new focus on individual endpoints. Experts recommend organizations identify gaps by evaluating how the changes have impacted connectivity, communications, and collaboration capabilities. They also advise reassessing threat models, attack surfaces, security tools, and operations to ensure no new blind spots were introduced by the shift to remote work. Being able to proactively identify gaps is critical for organizations to build resilience against evolving threats.

Ey giss-under-cyber-attack

Комсс Файквэе

The document discusses improvements organizations have made to address cyber threats, but also areas that still need work. It finds that many organizations now recognize the extent of cyber threats, with 76% owning information security policies at the highest level. 70% conduct security assessments of third parties accessing their data. However, the document notes that while improvements have been made, organizations need to do more quickly to address increasing cyber risks. Leading practices and innovation are needed to better protect against known and unknown future threats.

Under cyber attack: EY's Global information security survey 2013

This document summarizes the key findings from a survey of over 1,900 organizations on cybersecurity threats and responses. Some of the main points include: - Many organizations have improved their cybersecurity programs but still have work to do to address evolving threats. Top priorities include business continuity, cyber risks, and data protection. - Budgets for cybersecurity are increasing for 43% of organizations, but information security professionals still feel budgets are insufficient. - Focus is shifting from basic security operations to improving and innovating programs. However, skilled resources and executive support still lag behind needs. - Around half of organizations now align their security strategy with business and IT strategies, showing increased understanding of security's importance.

What Small Business Can Do To Protect Themselves Now in Cybersecurity

Reading Works Detroit

Insurance and security: finding common ground in a volatile security risk env...

Doreen Loeber

This document discusses insurance as a service (IaaS) and the changing relationship between insurance and security. It provides an overview of how traditional insurance policies work, and then discusses IaaS as an example of a unique product that enables organizations to respond to, recover from, and be ready for insured critical events before, during, and after an occurrence. The document concludes with tips for security leaders on how to benefit from IaaS, such as strengthening relationships with insurance/risk management and educating leadership on investments and returns in protecting the organization.

7350_RiskWatch-Summer2015-Maligec

Christine Maligec, CRM-E, CRIS

This document summarizes interviews with cybersecurity professionals about the current state of cyber risks. The interviewees discuss how senior leaders' understanding of cyber risk has improved but still faces challenges from technical complexity and uncertainty. The biggest barriers to protection are underfunding security and lack of user awareness training. A "bad day" would involve a major data breach or systems outage. The threats of organized crime, state-sponsored attacks, and exploiting human weaknesses will continue to evolve rapidly. Information sharing and early education are opportunities to stay ahead of this threat.

SYMANTEC_DELOITTE_PARTNERSHIP-UK (3)

Sarah Jarvis

This document discusses the growing threat of cyber attacks faced by UK businesses and outlines steps businesses can take to improve their cyber security posture. It finds that many UK companies lack confidence in their cyber security policies and abilities to protect against attacks. Cyber attacks can have significant negative financial and reputational impacts on businesses. The document recommends that businesses improve basic security procedures, understand the risks they face, and create a culture where cyber security is a priority for all employees through education and enforcement of security best practices. Taking proactive steps in these areas can help businesses better protect themselves against cyber threats now and in the future.

How Should Risk Leaders of Future Work With AI.pdf

The IRM India

Cybersecurity threats are increasing in frequency and sophistication, putting organizations at risk of data breaches, infrastructure damage, and loss of customer trust. Korn Ferry's Cybersecurity practice recruits top cybersecurity talent and helps organizations build strong cyber defenses by aligning leadership, capabilities, and culture. They offer recruiting and advisory services across industries for roles like CISO and security specialists. While demand is high, many organizations still have outdated systems and processes, leaving them vulnerable to attack.

InfraGard Webinar March 2016 033016 A

Ward Pyles

The document summarizes key takeaways from the RSA Conference 2016. It discusses the rising threat of ransomware and the need to back to basics on security fundamentals like authentication, firewalls, and software updates. It also notes that the target of attacks is expanding to cloud and big data, and that organizations need to treat data as toxic. Other topics covered include new approaches to threat modeling, developing resilience after a breach, extending security teams through outsourcing, and reassessing threat detection capabilities. The document provides an agenda and information on speakers for an upcoming cybersecurity summit event.

AI-Cyber-Security-White-Papers-06-15-LR

Bill Besse

The document discusses how predictive cyber intelligence can help organizations stay ahead of both cyber and physical security threats. It notes that investigations often find warning signs were missed by conventional defenses. The challenge is for organizations to detect potential threats early through tools like predictive cyber intelligence, which uses software and hardware to monitor public information for pre-incident indicators. This allows businesses to contain threats before damage occurs, whereas reactive security measures only address threats after the fact. The document provides examples of both cyberattacks and physical security risks organizations face and argues that predictive cyber intelligence can add important depth to defensive strategies.

Ask the Experts final

Daren Dunkel

The document discusses cybersecurity risks that boards of directors must address. It provides advice from seven cybersecurity experts on how boards should implement an effective risk management framework to detect threats, ensure early detection and monitoring, and develop robust recovery plans. The experts emphasize the importance of understanding a company's critical digital assets, supply chain risks, and continuously educating all levels of the organization on cybersecurity issues.

L123

Btyy121

This document discusses the growing threat of cybercrime to businesses and the need for stronger cyber security practices. Tech trends have exposed more data than ever before at the same time that cybercrime has become more sophisticated and profitable. The threats come from hackers, hacktivists, cyber terrorists, and sometimes even employees. Many companies remain vulnerable due to poor security practices and lack of proper plans and resources. Failure to adequately address these threats could cost businesses money, customers, reputation and competitive edge. The document provides advice on developing a strategic security plan, conducting risk assessments, prioritizing data security, implementing basic measures like strong passwords, and keeping security practices flexible and up to date.

Security risk

Randy Tamoria

1. The document discusses security risk management and outlines maturity levels of organizations in their approach to security risk management. It describes four levels - from initial/ad hoc implementation to optimizing where security risk management is fully integrated. 2. Key barriers to effective security risk management implementation are identified as unrealistic expectations, lack of clear vision and not treating implementation as a dedicated project. Guiding principles of direction, systems and execution are outlined to help integration. 3. Different industry sectors have varying needs for security investments depending on risk levels. Most organizations take on more risk than realized, over-engineer risks, or are too risk averse due to human cognitive limitations unless a structured risk management process is followed.

Maven risk management services

Richard Mojel

Maven UK provides a suite of risk management products and services including business resilience, crisis communication, brand protection, information security, risk reviews, economic espionage prevention, vetting processes, and event security. They employ experienced consultants with backgrounds in security, communication, finance, policing, and private industry. By partnering with Maven, clients gain strategic risk management expertise integrated into their overall business operations and culture.

eCrime-report-2011-accessible

Charmaine Servado

This document discusses managing information and technology risk in a changing business environment. It argues that managing risk is now vital to maximizing commercial potential and protecting brands and reputations from cyber threats. However, security strategies must be flexible to adapt to new technologies and business models. Effective risk management requires assessing realistic threats, prioritizing risks, and presenting risks in a business context. It also requires accounting for changing business dynamics and integrating risk management across the organization rather than taking a siloed approach.

Ace emerging-risks-barometer-2013

Factor-X

The document summarizes the key findings of a survey and research on emerging risks facing businesses. It identifies four top risks: 1) Infrastructure and supply chain risk was expected to have the largest negative financial impact due to lack of visibility into complex global supply chains. 2) Environmental risk was the second overall concern affecting all sectors. 3) Cyber risk and D&O risk tied for third as businesses realize internal errors are a large source of cyber risk and regulations are increasing liabilities for directors and officers. The research highlights the need for improved risk education, information sharing between companies and insurers, and a focus on internal security processes to help businesses address these emerging threats.

Cgr12 Brochure 040912

pedro2891

The document provides an agenda and details for the Legal Week Corporate Governance & Risk Forum taking place on October 18, 2012 in London. The one-day conference will focus on issues related to corporate governance, compliance, and risk management. It will feature panel discussions, workshops, and keynote speeches from experts in these fields. Topics will include the Eurozone crisis, corporate culture, extradition laws, benchmarking governance, managing outsourced risk, and preparing for unforeseeable events. The event is aimed at in-house lawyers, compliance officers, and risk professionals.

The meaning of security in the 21st century

The Economist Media Businesses

This global study, conducted by the Economist Intelligence Unit (EIU) and sponsored by Palo Alto Networks, sheds light on the ways business leaders are dealing with the increasing volume of threats they face from insecurities that arise because of disruption beyond their corporate borders. For in-depth interviews from industry leaders on how companies are combating security threats, go to https://goo.gl/fXcnLN

Hospitality Security and Safety Solutions

pfarina

Digital Outsourcing: Risks, Pitfalls, and Security Considerations

Peter1020

-The Current Global Digital Threat Climate -Cyber-Trends Against The U.S. Financial Service Sector -Considerations Prior To Outsourcing -Pitfalls In International Partnerships -Communications, Connections, And Security Considerations Between Locations -Dealing With Data Exposures -5 Things You Can Do To Protect Your Existing Outsourcing Right Now Session 2 10:30am-11:30am -Technology Outsourcing Trends -Secure Outsourcing Technologies -Collaboration Methods With Remote Teams -How To Connect People With The Right Information At The Right Time And The Right Place -How To Connect People With Fellow Employees, Vendors, Partners Or Other External Contacts Outside Of the Organization -Project Management Technology Of Remote Resources

Titas Global Ltd

Andrew Newcombe

Titas Global Ltd. provides a wide range of security and risk management services including intelligence analysis, consultancy, travel safety, medical services, and crisis response. They have over 70 years of combined experience from former UK military and law enforcement specialists. Their services help protect clients and their personnel operating in potentially high-risk environments around the world.

Risksense: 7 Experts on Threat and Vulnerability Management

Mighty Guides, Inc.

Juan Morales advises prioritizing vulnerability remediation by first identifying the critical assets that are most important to keeping the business running operationally and financially. It is important to understand where these key assets are located and have conversations with business stakeholders to obtain insight on the criticality of the assets. Quantifying risk to stakeholders in terms of potential system downtime and financial impact, such as revenue loss, can help communicate risk more effectively than simply stating the cost to fix a vulnerability. Visuals like charts and dashboards with trend lines are also effective for stakeholders to understand risk.

RSA Security Brief : Taking Charge of Security in a Hyperconnected World

EMC

The new RSA Security Brief highlights that basic security lapses still contribute to most security incidents. The report identifies top areas for improvement and provides practical guidance on measures that deliver the greatest impact on organizations' ability to respond to cyber attacks and data breaches. About RSA Security Brief : RSA Security Briefs provide security leaders and risk management executives with essential guidance on today's most pressing information security threats and opportunities. Each Brief is created by a select team of experts who connect experiences across organizations to share specialized knowledge on a critical security topic. Offering both big-picture insight and practical technology guidance, RSA Security Briefs are vital reading for today's forward-thinking security and risk management practitioners. Read More via

Important Role of Protective Services Company.pdf

ETS Risk Management

In today’s ever-changing world, safety and security have become paramount concerns for individuals, businesses, and organizations alike. The increasing need for protection against various threats has given rise to a booming industry: protective services. A Protective Services Company plays a pivotal role in safeguarding lives, assets, and information. This article will delve into the world of protective services, its functions, and its significance in our modern society.

A Helping Hand : Helps Risk Managers - The IRM India

The IRM India

Rcs triumfant watchful_webinar_final

Patrick Florer

Are you controlling information disclosure? Exploring the causes, costs, and remedies for a data breach. This webinar will explore the causes and costs of data breaches, as well as ways to prevent and mitigate the impact that results from the inadvertent exposure of sensitive data. Attacks from the inside and outside of the network will be discussed, along with the various aspects of a data breach, including the types of data at risk and the variety of costs and impacts that an organization might incur. We will discuss a number of high profile breaches, including TJX, Heartland Payment Systems, Sony, and others. Costs from various industry reports will be presented, together with original statistical analyses from Risk Centric Security. The webinar will conclude with a discussion of cutting edge types of safeguards and controls, including integrated encryption-based rights management, egress filtering and control, and advanced malware detection and auto-remediation.

Cyber Security: Why your business needs protection & prevention measures

CBIZ, Inc.

How to Harness Nature to Create PR Ideas People Actually Care About

Brittany Ferdinands

Media, Malice and Manipulation in the Age of Purpose

Brittany Ferdinands

Similar to 'Unsustainably Sustainable' by Dr Carl Ungerer and Vanessa Liell at Mumbrella CommsCon 2023

Cybersecurity Marketing

Alex Weishaupt

InfraGard Webinar March 2016 033016 A

Ward Pyles

AI-Cyber-Security-White-Papers-06-15-LR

Bill Besse

Ask the Experts final

Daren Dunkel

L123

Btyy121

Security risk

Randy Tamoria

Maven risk management services

Richard Mojel

eCrime-report-2011-accessible

Charmaine Servado

Ace emerging-risks-barometer-2013

Factor-X

Cgr12 Brochure 040912

pedro2891

The meaning of security in the 21st century

The Economist Media Businesses

Hospitality Security and Safety Solutions

pfarina

Digital Outsourcing: Risks, Pitfalls, and Security Considerations

Peter1020

Titas Global Ltd

Andrew Newcombe

Risksense: 7 Experts on Threat and Vulnerability Management

Mighty Guides, Inc.

RSA Security Brief : Taking Charge of Security in a Hyperconnected World

EMC

Important Role of Protective Services Company.pdf

ETS Risk Management

A Helping Hand : Helps Risk Managers - The IRM India

The IRM India

Rcs triumfant watchful_webinar_final

Patrick Florer

Cyber Security: Why your business needs protection & prevention measures

CBIZ, Inc.

Similar to 'Unsustainably Sustainable' by Dr Carl Ungerer and Vanessa Liell at Mumbrella CommsCon 2023 (20)

Cybersecurity Marketing

InfraGard Webinar March 2016 033016 A

AI-Cyber-Security-White-Papers-06-15-LR

Ask the Experts final

L123

Security risk

Maven risk management services

eCrime-report-2011-accessible

Ace emerging-risks-barometer-2013

Cgr12 Brochure 040912

The meaning of security in the 21st century

Hospitality Security and Safety Solutions

Digital Outsourcing: Risks, Pitfalls, and Security Considerations

Titas Global Ltd

Risksense: 7 Experts on Threat and Vulnerability Management

RSA Security Brief : Taking Charge of Security in a Hyperconnected World

Important Role of Protective Services Company.pdf

A Helping Hand : Helps Risk Managers - The IRM India

Rcs triumfant watchful_webinar_final

Cyber Security: Why your business needs protection & prevention measures

More from Brittany Ferdinands

How to Harness Nature to Create PR Ideas People Actually Care About

Brittany Ferdinands

Media, Malice and Manipulation in the Age of Purpose

Brittany Ferdinands

'How Australian Red Cross Harnessed Technology to Advance its Customer Experi...

Brittany Ferdinands

The document discusses the Australian Red Cross's use of digital platforms to optimize experiences and drive outcomes. It summarizes the Red Cross's response to recent floods in NSW and QLD, deploying over 500 personnel and registering over 7,000 people. It also discusses using the Optimizely platform to plan, develop, and experiment with digital experiences, with the goal of improving outcomes through testing and data. The platform is aimed at improving experiences for both employees and customers.

Chairman Chris Maxwell leads discussion 'The Rise of the Hybrid How In-House ...

Brittany Ferdinands

Spark Foundry’s Anna Cherry and Matthew Turl reveals 'Exclusive Research In I...

Brittany Ferdinands

Zenith’s Nickie Scriven and Neuro-Insight’s Peter Pynta present 'Demystifying...

Brittany Ferdinands

Pickstar’s James Begley shares 'Innovation in Isolation Reinventing Your Busi...

Brittany Ferdinands

Wrappr's Liam Shaw presents 'Untraditional Create Better Marketing by Thinkin...

Brittany Ferdinands

Join senior industry leaders as they discuss 'How to Create Digital Moments t...

Brittany Ferdinands

Car Sales' Priya Kanniappan and Stephen Kyefulumya present 'How Australian In...

Brittany Ferdinands

This document discusses how Australian innovators can break the status quo of mass media by focusing on engagement based on trust, first-class personalization, mindset-based marketing, and aligning technology, people and processes. It argues that local publishers are uniquely positioned to create excellent customer experiences through genuine value exchanges due to changes in the digital media ecosystem around privacy and increased online time. The document provides examples of how carsales achieves personalization at scale through a customer data platform that unifies customer data and orchestrates delivery to various destinations.

Julia Vargiu Presents 'Fit for Scale The Indies That Broke the Barrier and Ho...

Brittany Ferdinands

Dr Con Menictas and Brian Fine present 'Exclusive Research How to Successfull...

Brittany Ferdinands

Athena's Peter Sloterdyk presents 'Purpose & Principles_ Leadership in Market...

Brittany Ferdinands

InMobi’s Richard O’Sullivan Presents 'Gaming Has Levelled Up Why In-Game Adv...

Brittany Ferdinands

Megan Jones from the Australian Network on Disability presents 'Filling the G...

Brittany Ferdinands

Moensie Rossier presents 'Tyranny of Empathy: What Brands Should Not Do With ...

Brittany Ferdinands

John Burgess and Trent Agnew present 'Creating Value with Social Procurement'...

Brittany Ferdinands

Theo Kapodistrias presents 'Simplify to Amplify Creating Messages That Matter...

Brittany Ferdinands

DoubleVerify's Imran Masood presents 'Everything You Know About Brand Safety ...

Brittany Ferdinands

Ali Tilling and Andy Clarke present 'The Availability Bias How to Gear Up Mar...

Brittany Ferdinands

The document discusses the concept of availability bias and how it can be used to improve marketing strategies. It notes that availability bias causes people to assess importance based on ease of recall or familiarity. Understanding availability bias allows marketers to increase brand awareness and influence consumer choices through techniques like sponsorships that maximize brand exposure across different touch points. The document suggests marketers take approaches like prioritizing integration of their brand identity, focusing on creating feelings over just branding, and leveraging consumer passions to indirectly associate their brand.

More from Brittany Ferdinands (20)