So it looks like Australia may finally have a data breach notification law. It was back in 2011 when the Government started really discussing this again and at that time I wrote a little about it and posted to links to an interesting point/counterpoint as to whether these laws work. While I think the jury may still be out, I hope some law is better than no law and at the very least we get something reasonable that makes sense.
(am I setting the bar too high here?)

At the same time "China" is reported to have hacked the Australian Government, including stealing plans for the new ASIO Headquarters - but it seems we forgive them, so all is OK.

I wonder if/what the Government would have to report if the new laws were in place already?

National Cyber Security Awareness week is this week (20-24 May). Full details here.

Think this might be kind of like letting my 2 year old guard the bikkie tin...

http://www.zdnet.com/cn/chinas-kingsoft-unveils-cloud-based-apt-product-7000015424/

I sense this is not going to be without it's challenges or challengers...

http://www.reuters.com/article/2013/05/15/us-cyber-summit-flaws-idUSBRE94E11B20130515?irpc=932

Privacy is getting more and more attention in Australia, with the Privacy Commissioner recently stating:

"Information security is clearly a significant privacy issue and has emerged as a major challenge for us all. These incidents tell us that 'privacy by design' is essential. Organisations need to build privacy into business as usual practices and new projects"

Here's an interesting article on the motivation of Chinese hackers.

To quote a famous Chinese historical figure:

“If you know your enemies and know yourself, you will not be imperiled in a hundred battles; if you do not know your enemies but do know yourself, you will win one and lose one; if you do not know your enemies nor yourself, you will be imperiled in every single battle” --Sun Tzu.

Security is fundamentally about people, and everything we know about people is relevant to security. -- B. Schneier