Australian businesses hit hard by rising deepfake threats

Australian businesses hit hard by rising deepfake threats | Insurance Business Australia

Cyber

Australian businesses hit hard by rising deepfake threats

Incidents prompted increased measures

Cyber

By
Roxanne Libatique

Nearly a quarter of Australian businesses faced deepfake security incidents last year, according to a report by ISMS.online, a compliance platform.

The report, which surveyed 506 information security leaders across sectors such as finance, technology, healthcare, manufacturing, education, and energy, found that 24% of organisations experienced deepfake-related issues in the last 12 months.

Deepfake technology becomes major concern for Australian businesses

Deepfake technology, though newer compared to traditional threats like social engineering and malware, has swiftly become a major concern for businesses.

Australian organisations’ cyber incidents

ISMS.online’s survey results come as the Australian government seeks to establish the nation as a global cybersecurity leader through its Australian Cybersecurity Action Strategy. Additionally, the Australian Prudential Regulation Authority (APRA) recently sent a directive to all APRA-regulated entities, emphasising the importance of data backups in ensuring cyber resilience.

Despite these efforts, the compliance platform’s report found 75% of surveyed organisations reported incidents linked to supply chain partners, with 39% citing partner data as the most frequently compromised over the past year.

Australian organisations plan to boost cyber resilience

In response to these challenges, 66% of businesses plan to increase their spending on securing supply chain and third-party vendor connections over the next year, with 79% expecting to boost their overall information security budget.

Emphasising training and awareness, nearly half (46%) of the respondents have intensified employee education programs in the last year to counteract sophisticated cyber threats.

Gaps in cybersecurity measures in Australian organisations

Despite these measures, more than a third (36%) of businesses admitted that employees use personal devices (BYOD) without adequate security protocols, increasing vulnerability to targeted attacks such as deepfakes.

Michelle McCarthy, head of Asia-Pacific at ISMS.online, said the survey results highlight the need for robust information security measures.

“To see nearly a quarter of businesses already impacted by deepfake attacks is worrying. These findings, alongside the vulnerabilities associated with third-party suppliers, show that businesses must ensure they have a strong information security posture. It’s promising that the majority are planning further financial investment into their information security and supplier management,” she said.

Australian businesses use AI to improve information security

Although deepfakes pose a significant risk, 84% of businesses believe AI technology is enhancing their information security, with 69% planning to increase investment in AI and machine learning security applications.

“AI and deepfake technologies have evolved rapidly and continue to do so at pace. As businesses consider implementing AI tools in their information security operations, they must align with the global regulations that will undoubtedly come into force over time. Standards like ISO 42001, which encompasses AI use, will help organisations show their ethical, compliant approach to AI to their customers, regulatory bodies, and partners,” McCarthy said.

The research was commissioned by ISMS.online and conducted by Censuswide, an independent market research firm. The survey included 1,526 respondents working in information security across the UK (502), the US (518), and Australia (506), with the fieldwork carried out between March 22, 2024, and April 2, 2024.

Related Stories

Keep up with the latest news and events

Join our mailing list, it’s free!