Is Australia prepared to deal with the cyber skills crisis?

Is Australia prepared to deal with the cyber skills crisis?

Earlier this year, Prime Minister Scott Morrison identified Australia as the target of major organised cyber-attacks emanating from a state-based actor.

RMIT Online logo

4 min read | 4 November 2022

It wasn’t the first, and it won’t be the last, with Defence Minister Linda Reynolds warning the alarming "new normal" of persistent cyber-attacks on Australia is blurring the difference between "peace and war".

To discuss this new normal and more, we sat down with Sean Duca, Vice President, Regional Chief Security Officer - Asia Pacific & Japan at Palo Alto Networks to talk about the role organisations play in national cyber security, and whose responsibility it is to keep our information safe. Spoiler alert: it’s all of us

Hi Sean, can you tell us about your background in cyber security - what your current role involves at Palo Alto Networks, and why you are passionate about the field? 

I started working at a company which did technical support for a number of software companies who didn’t have representation in Australia. There I learnt and supported Dr Solomon’s antivirus software which later got acquired by Network Associates (McAfee) where I then moved to. I worked at McAfee for 15 years in a range of roles from support engineer, sales engineer, sales engineering manager, an enterprise architect with my last role as the chief technology officer for the Asia Pacific region. For the last 5 years, I have been at Palo Alto Networks as the vice president and regional chief security officer for the Japan and Asia Pacific (JAPAC) region.

In my role, I work with organisations and the industry at large to change the narrative that cyber risk is a risk every executive needs to take on board and manage it like any other risk. I lead a team of threat intelligence analysts for our threat intelligence group, Unit 42, whose job is to research and analyse the adversary targeting interests in this region. I’m passionate about cybersecurity as it's dynamic, ever-changing and allows me to constantly learn and be challenged.

This year, Australia was a target of a major organised cyber-attack, but we’ve also seen attacks move beyond just critical infrastructure and government targets (Lion as an example). Is cybersecurity a problem for the IT department, or does it extend more broadly across the organisation?

It extends across the organisation as everyone has a role to play. Cyber is a vector for good and bad things to happen. It’s up to all of us to ensure that we do what we can to protect ourselves, families and the companies we work in.

As Australia continues to face these growing threats, what do you think will be some of our biggest challenges we face over the next few years? 

If I look back, the same themes have been repeated and continue to evolve. Ransomware and Phishing will be around for some time as the cybercriminals know that it pays, and allows them to collect and harvest our data. With everything being connected more and more, I expect to see the Internet of Things (IoT) devices being targeted and used for nefarious activities, whether it be a way to get into an organisation or used as a botnet to target someone or something. 5G is expected to be the norm in the coming years, allowing communications services to leverage extremely low latency, which cyber criminals will use to target our dependence on these services and systems which may in turn compromise the availability of the systems. 

AustCyber's research has predicted that Australia is facing a skills shortage of 18,000 cybersecurity experts by 2026. What do we need to do differently? 

The demand for cybersecurity will continue outstripping the supply until there is a fundamental shift in mindset. Automation is going to be a key element in the future of cybersecurity because human operators should not be required - and expected - to do everything. Instead, they need to harness skill sets that cannot be automated and focus on higher-order tasks such as problem-solving, communication and collaboration. Companies need to stop searching for the elusive unicorn (it doesn’t exist!), stop looking in the same well and start looking in the right one for talent.

There has been some buzz around AI in the Cyber security field this year. Is automation the future for our security needs, or will we always need cyber security trained professionals across the workplace?

We will need both. Artificial intelligence is playing an increasing role in cybersecurity, with security tools analysing data from millions of cyber incidents, and using it to identify potential threats which complements the work security professionals do. Automation can help alleviate the volume of work and tasks security professionals deal with, but we will always need everyone to ensure they know their role when it comes to security.

If you're interested in learning more, check out the range of courses we offer in Cyber Security at RMIT Online.

04 November 2022

Share

Related courses and degrees

No courses match your current filters

Try adjusting them or reset all filters to see more options

Short course

Cyber Security Risk and Strategy

  • next start date 2 November 2026
  • fees AU$1,900 incl. GST
  • duration 6 weeks

Online Bachelor of Business – Business and Technology minor

  • next intake January, April, July, September
  • fees Commonwealth Supported Places
  • duration 36 months
Postgraduate study

Online Graduate Certificate in Cyber Security

  • next intake No upcoming intakes
  • fees AU$16,320 (2026 total)
  • duration Full-time 9 months, Part-time 1 year

Related articles

Two men looking at a laptop screen.

Why choose a career in DevOps in 2022?
Icon / Small / CalendarCreated with Sketch. 27 Sep 2023

DevOps is not a role, person or title. It’s a way of thinking and building that can be applied across disciplines

rmito-blog-isaustraliapreparedtodealwiththecyberskillscrisis-refimage-1220x732.jpg

Is Australia prepared to deal with the cyber skills crisis?
Icon / Small / CalendarCreated with Sketch. 04 Nov 2022

Earlier this year, Prime Minister Scott Morrison identified Australia as the target of major organised cyber-attacks emanating from a state-based actor.

A man with a blurry screen of code in the background.

Which IT career path should you pursue in 2022?
Icon / Small / CalendarCreated with Sketch. 11 Oct 2022

Some IT skills are looking more and more valuable, while others are beginning to fade as technology changes.

View all articles

Connect with us

Be part of the conversation and keep in touch with us to find out about study options, campus life and upcoming events on our social media channels.

aboriginal flag float-starttorres strait flag float-start

Acknowledgement of Country

RMIT University acknowledges the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we conduct the business of the University. RMIT University respectfully acknowledges their Ancestors and Elders, past and present. RMIT also acknowledges the Traditional Custodians and their Ancestors of the lands and waters across Australia where we conduct our business - Artwork 'Sentient' by Hollie Johnson, Gunaikurnai and Monero Ngarigo.

Learn more about our commitment to Aboriginal and Torres Strait Islander peoples
aboriginal flag float-starttorres strait flag float-start

Acknowledgement of Country

RMIT University acknowledges the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we conduct the business of the University. RMIT University respectfully acknowledges their Ancestors and Elders, past and present. RMIT also acknowledges the Traditional Custodians and their Ancestors of the lands and waters across Australia where we conduct our business.

More information