--- title: Top 5 challenges facing CISOs today and how to address them description: Unit 42 is the cyber security research unit of Palo Alto Networks. This article covers the top five cyber security issues & strategies to address them. image: https://www.enablis.com.au/hubfs/Zero%20trust.jpg --- ![icon-13](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-13.svg) Sydney: [02 8272 4000](tel:0282724000) Support: [1300 887 664](tel:1300887664) ![icon-14](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-14.svg) [info@enablis.com.au](mailto:info@enablis.com.au) [![Enablis](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/Enablis.svg) ](https://www.enablis.com.au/) [ Speak to Us ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLLSvCizWf2Jw2xZi451VjL9LuqA8ueRgrW8adMpNCRQ4FlXntI4wpoe4APcWv22cBL4FcYji%2FxdbPqoyQEZnvbrJbJBlKMkUdgv%2FtQb8GZS3421foxyvO6Zm27LQf6roWNvH5FNakVdn6jRQZwh5VAkWuFrmLxRIxSqDyazFPD68YRKUlv3bIvFp1Ub%2B1o%3D&portalId=19555244) [ Customer Portal ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLLUGT52GqIj5S0ix9r0QkzyIyKDl376cyN4VHq1qpoFJ5wM9A0mF8wkaI8WwkBIUNuvPVLb5VnWkvQjGfthSmmG%2Fbi2N8rDZTpbnHIlTwVh044Dj659iiJMf31OLt0Lg9g3Z9h0Zbe05Ap7B3AfLIEFQoApuR1%2F7LLmLygtpy3nSoVo77%2FLbl304QPZMkkQ6X5A22niwhKXAdSu&portalId=19555244) - [ About Us ](https://www.enablis.com.au/about-us) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-02](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-02.svg) [ Our Team ](https://www.enablis.com.au/about-us#team) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-03](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-03.svg) [ Case Studies ](https://www.enablis.com.au/case-studies) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-04](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-04.svg) [ Partners ](https://www.enablis.com.au/about-us/partners) ![icon-contactus](https://www.enablis.com.au/hubfs/Enablis_May2021/images/icon-contactus.svg) [ Contact us ](https://www.enablis.com.au/about-us/contact) - [ Connectivity ](https://www.enablis.com.au/solutions/connectivity) [ Security ](https://www.enablis.com.au/solutions/security) - [ Managed Services ](https://www.enablis.com.au/managed-services-ensure) [ Professional Services ](https://www.enablis.com.au/services/professional-services) - [ Our Blog ](https://www.enablis.com.au/our-blog) [ Knowledge Centre ](https://www.enablis.com.au/knowledge-centre) # Our Blog Stay up-to-date with the latest communications, technology and security insights. 20 Dec 2023 [It security, ](https://www.enablis.com.au/our-blog/tag/it-security) [Sase, ](https://www.enablis.com.au/our-blog/tag/sase) [Network security, ](https://www.enablis.com.au/our-blog/tag/network-security) [Security strategy, ](https://www.enablis.com.au/our-blog/tag/security-strategy) [#zerotrust, ](https://www.enablis.com.au/our-blog/tag/zerotrust) [#cybersecurity, ](https://www.enablis.com.au/our-blog/tag/cybersecurity) [#zerotrustnetworkaccess, ](https://www.enablis.com.au/our-blog/tag/zerotrustnetworkaccess) [Palo alto networks](https://www.enablis.com.au/our-blog/tag/palo-alto-networks) ## Top 5 challenges facing CISOs today and how to address them Unit 42 is the cyber security research unit of Palo Alto Networks, and provides the latest industry intelligence to help CISOs, CIOs and other technology leaders better navigate today’s fast evolving threat landscape. In this article we look at the top five cyber security issues on everyone’s radars as we head towards 2024, and we discuss strategies for dealing with them. The Top 5 challenges are: **1. Supply chain attacks** DevOps and agile software development practices have helped organisations speed up development cycles allowing for more rapid release timelines. But speed often results in a reliance on third-party code in vendor applications, which could come from anyone, including an Advanced Persistent Threat (APT), allowing attackers to take advantage and launch supply chain attacks. Given modern cloud software development practices for sharing and incorporating third-party code—and creating complex structures that depend on many other building blocks—if an attacker compromises third-party developers or their code repositories, it’s possible to infiltrate thousands of organisations. *Solution: **Embed security into the software** d**evelopment pipeline* Extending security beyond the runtime phase (the last phase in the build, deploy, and run model of development) and integrating it into every stage of development allows for the creation of automated security guardrails. Within these guardrails you’re better able to: - Catch vulnerable code prior to deployment (i.e. in the pre-commit stage). - Check builds for defects prior to pushing code to production. - Conduct efficient vulnerability scanning in runtime environments. Step 1 in extending security across development starts with creating a shift-left security strategy that can evolve over time. A shift-left security strategy is a brief document outlining security steps to take place before the run phase. It should define what success looks like, and set out ownership, milestones, and metrics for embedding security processes and tools into all stages of the Continuous Integration/Continuous Development (CI/CD) pipeline. Once the strategy is created, you then need to determine where and how software is created in your organisation. Begin by analysing organisation-wide information and documenting the overall flow of software in your company. Key items to identify include who is developing code (people), how it flows from development laptops to production (process), and which systems you use to enable the process (technology). *Did you know 63% of third-party code templates used in building cloud infrastructure contained insecure configurations. And **96% of third-party container applications deployed in cloud infrastructure contain known vulnerabilities.* **2. Multifactor authentication ** Looking at a selection of recent Unit 42 incident response cases, 89 percent of organisations reported that they’d fallen victim to Business Email Compromise (BEC) attacks and admitted they failed to turn on MFA, or follow email security best practices. Additionally, in 50 per cent of all Unit 42 incident response cases— BEC or otherwise—organisations lacked MFA on key Internet-facing systems such as corporate webmail, virtual private network (VPN) solutions, and other remote access solutions. *Solution: Implement MFA as a technical control and security policy for all users* Configured correctly, MFA is an effective way to created ‘layered’ defences, making it harder for malicious actors to access systems with merely a stolen password. Integrate MFA for all remote access, Internet-accessible, and business email accounts to greatly shrink your attack surface. To prevent threat actors from circumventing MFA, disable legacy authentications / protocols and confirm that MFA is not only deployed, but that employees are also using it correctly. And be sure to avoid using SMS as your second form of authentication. Effective forms of MFA include One-Time Passwords (OTPs) and cryptographic token-based authentication. Remember to implement MFA internally as well. It’s very common, for instance, after authenticating MFA once, that a user then bounces around the network without re-verifying MFA, even when moving to a system with a different trust level (e.g., from workstation to server). **3. Cloud security and Identity Access Management (IAM) ** Poorly configured cloud environments open the door wide open for malicious actors, allowing them to gain initial access without the need for especially sophisticated techniques or specific vulnerabilities. It’s no surprise then that attackers seek them out in search of low-hanging fruit. A recent volume of the [Unit 42 Cloud Threat Report](https://www.paloaltonetworks.com/prisma/unit42-cloud-threat-research) noted that IAM misconfigurations alone contributed to 65 per cent of observed cloud security incidents. *Solution: Secure your cloud environments with* *proper training and configuration* Access to cloud controls such as Cloud Services Provider (CSP) consoles, APIs, and command-line interfaces in the cloud should be allocated on a needs-to-know basis. Such Role-Based Access Control (RBAC) is critical for mitigating the risks of misconfiguration and other security errors. It’s recommended that organisations should also invest in a cloud-native security platform to routinely monitor cloud environments for IAM misconfigurations both within production and development environments. In addition, your organisation should deploy data loss prevention solutions, conduct regular audits of cloud data to determine what is most sensitive and where it’s located, and deploy MFA for authorised users as well as certificates and digital signatures. **4. A growing attack surface ** Modern attack surfaces are constantly changing, meaning that as attack surfaces grow, the number of unmanaged assets across those surfaces grow, too. As a result, attackers are becoming increasingly adept at scanning the internet in search of vulnerable systems and exploiting gaps in security before they can be patched. *Solution: Be a Champion for proactive visibility* Security teams do the best they can with the resources and the data they have, but visibility is often the key determinant of whether an asset is secure. It’s important, therefore to choose an attack surface management platform that can provide a comprehensive and continuously updated inventory of all internet-connected assets and potential exposures, including shadow IT infrastructure and assets susceptible to common vulnerabilities and exposures (CVEs), while ranking risks and offering recommendations for dealing with them. An attack surface assessment can also help improve visibility of internet-facing assets. **5. Overloaded security teams ** CISOs and their teams face ever-shifting challenges and risks as the cadence and complexity of cyber threats continue to grow exponentially. Meanwhile, they face a raft of internal challenges. In 11 percent of Unit 42 incident response cases, important security alerts got lost without sufficient review/action. And in many cases, administrators are juggling too many different products, often monitoring the network using a patchwork of tools providing disparate information. And further compounding things, they are typically slowed down by having too many manual/time-consuming processes. Poor processes for patch management tasks contributed to threat actor success in 28 per cent of the Unit 42 incident response cases. These cases involved vulnerabilities that were disclosed publicly with patches available. However, the threat actors were able to exploit vulnerabilities that remained unpatched. *Solution: Automate where possible* Intelligent automation can help your team better allocate scarce resources, consolidate visibility and control over a dynamic network, and reduce response and recovery tasks. Consider implementing automation tools and take advantage of pre-made playbooks to respond and recover from incidents quickly. Security Orchestration, Automation, and Response (SOAR) products can automate the whole process of user investigation, endpoint isolation, notifications, enrichment, and threat hunting. By orchestrating across security information and event management (SIEM), firewalls, endpoint security, threat intelligence sources, and response teams can act quickly in the face of a breach or attack. If you would like to discuss your security requirements to ensure your data and staff are protected[ email here](mailto:belinda.johnson@enablis.com.au) to get in contact with one of Enablis’ security experts or d**ownload the full Report titled: 5 Security Concerns for CISOs and How to Address Them [here.](https://www.enablis.com.au/hubfs/5-security-concerns-for-cisos.pdf)** [ Share ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.enablis.com.au%2Four-blog%2Ftop-5-challenges-facing-cisos-today) [Next](https://www.enablis.com.au/our-blog/how-do-cisos-get-the-executive-to-buy-in-to-cyber-security) ### Categories Pick a category - [Network Security (49)](https://www.enablis.com.au/our-blog/tag/network-security) - [IT security (46)](https://www.enablis.com.au/our-blog/tag/it-security) - [SASE (45)](https://www.enablis.com.au/our-blog/tag/sase) - [#cybersecurity (37)](https://www.enablis.com.au/our-blog/tag/cybersecurity) - [#zerotrust (34)](https://www.enablis.com.au/our-blog/tag/zerotrust) - [security strategy (34)](https://www.enablis.com.au/our-blog/tag/security-strategy) - [#Zerotrustnetworkaccess (28)](https://www.enablis.com.au/our-blog/tag/zerotrustnetworkaccess) - [managed service providers in Australia (26)](https://www.enablis.com.au/our-blog/tag/managed-service-providers-in-australia) - [security (25)](https://www.enablis.com.au/our-blog/tag/security) - [Palo Alto Networks (23)](https://www.enablis.com.au/our-blog/tag/palo-alto-networks) - [cloud (19)](https://www.enablis.com.au/our-blog/tag/cloud) - [enablis (18)](https://www.enablis.com.au/our-blog/tag/enablis) - [Network (16)](https://www.enablis.com.au/our-blog/tag/network) - [Enterprise Browser (9)](https://www.enablis.com.au/our-blog/tag/enterprise-browser) - [Not for profit (9)](https://www.enablis.com.au/our-blog/tag/not-for-profit) - [#ZTNA (8)](https://www.enablis.com.au/our-blog/tag/ztna) - [protect (8)](https://www.enablis.com.au/our-blog/tag/protect) - [Identity Management (6)](https://www.enablis.com.au/our-blog/tag/identity-management) - [communications (6)](https://www.enablis.com.au/our-blog/tag/communications) - [donate (6)](https://www.enablis.com.au/our-blog/tag/donate) - [#cybersecurityfail (5)](https://www.enablis.com.au/our-blog/tag/cybersecurityfail) - [Charity (5)](https://www.enablis.com.au/our-blog/tag/charity) - [IT Partner (5)](https://www.enablis.com.au/our-blog/tag/it-partner) - [MS teams voice (5)](https://www.enablis.com.au/our-blog/tag/ms-teams-voice) - [Managed Service Provider (5)](https://www.enablis.com.au/our-blog/tag/managed-service-provider) - [Youth (5)](https://www.enablis.com.au/our-blog/tag/youth) - [collaboration (5)](https://www.enablis.com.au/our-blog/tag/collaboration) - [communication (5)](https://www.enablis.com.au/our-blog/tag/communication) - [digital transformation (5)](https://www.enablis.com.au/our-blog/tag/digital-transformation) - [networking security (5)](https://www.enablis.com.au/our-blog/tag/networking-security) - [social responsibility (5)](https://www.enablis.com.au/our-blog/tag/social-responsibility) - [technology (5)](https://www.enablis.com.au/our-blog/tag/technology) - [video conferencing (5)](https://www.enablis.com.au/our-blog/tag/video-conferencing) - [volunteers (5)](https://www.enablis.com.au/our-blog/tag/volunteers) - [Community Services (4)](https://www.enablis.com.au/our-blog/tag/community-services) - [Information Technology (4)](https://www.enablis.com.au/our-blog/tag/information-technology) - [calling (4)](https://www.enablis.com.au/our-blog/tag/calling) - [managed service (4)](https://www.enablis.com.au/our-blog/tag/managed-service) - [IT (3)](https://www.enablis.com.au/our-blog/tag/it) - [Legacy systems (3)](https://www.enablis.com.au/our-blog/tag/legacy-systems) - [Mimecast (3)](https://www.enablis.com.au/our-blog/tag/mimecast) - [The Benevolent Society (3)](https://www.enablis.com.au/our-blog/tag/the-benevolent-society) - [email security (3)](https://www.enablis.com.au/our-blog/tag/email-security) - [multiple IP telephony platforms (3)](https://www.enablis.com.au/our-blog/tag/multiple-ip-telephony-platforms) - [network security. cloud computing (3)](https://www.enablis.com.au/our-blog/tag/network-security-cloud-computing) - [AI (2)](https://www.enablis.com.au/our-blog/tag/ai) - [IDAAS (2)](https://www.enablis.com.au/our-blog/tag/idaas) - [NFP (2)](https://www.enablis.com.au/our-blog/tag/nfp) - [Okta (2)](https://www.enablis.com.au/our-blog/tag/okta) - [Palo Alto (2)](https://www.enablis.com.au/our-blog/tag/palo-alto) - [attack (2)](https://www.enablis.com.au/our-blog/tag/attack) - [business technology (2)](https://www.enablis.com.au/our-blog/tag/business-technology) - [customers (2)](https://www.enablis.com.au/our-blog/tag/customers) - [employees (2)](https://www.enablis.com.au/our-blog/tag/employees) - [hackers (2)](https://www.enablis.com.au/our-blog/tag/hackers) - [identity (2)](https://www.enablis.com.au/our-blog/tag/identity) - [leadership (2)](https://www.enablis.com.au/our-blog/tag/leadership) - [networks (2)](https://www.enablis.com.au/our-blog/tag/networks) - [secure browser (2)](https://www.enablis.com.au/our-blog/tag/secure-browser) - [4 steps (1)](https://www.enablis.com.au/our-blog/tag/4-steps) - [Aged Care (1)](https://www.enablis.com.au/our-blog/tag/aged-care) - [Australia Malware (1)](https://www.enablis.com.au/our-blog/tag/australia-malware) - [Crowdstrike (1)](https://www.enablis.com.au/our-blog/tag/crowdstrike) - [Disruption (1)](https://www.enablis.com.au/our-blog/tag/disruption) - [IT Budget (1)](https://www.enablis.com.au/our-blog/tag/it-budget) - [IT Challenges (1)](https://www.enablis.com.au/our-blog/tag/it-challenges) - [IT Director (1)](https://www.enablis.com.au/our-blog/tag/it-director) - [IT Services Provider (1)](https://www.enablis.com.au/our-blog/tag/it-services-provider) - [IT consolidation (1)](https://www.enablis.com.au/our-blog/tag/it-consolidation) - [IVE (1)](https://www.enablis.com.au/our-blog/tag/ive) - [MSP (1)](https://www.enablis.com.au/our-blog/tag/msp) - [Management (1)](https://www.enablis.com.au/our-blog/tag/management) - [NBN (1)](https://www.enablis.com.au/our-blog/tag/nbn) - [NFP's (1)](https://www.enablis.com.au/our-blog/tag/nfps) - [Race4Change (1)](https://www.enablis.com.au/our-blog/tag/race4change) - [SD-WAN (1)](https://www.enablis.com.au/our-blog/tag/sd-wan) - [Security Partner (1)](https://www.enablis.com.au/our-blog/tag/security-partner) - [Shadow IT (1)](https://www.enablis.com.au/our-blog/tag/shadow-it) - [Strategic IT (1)](https://www.enablis.com.au/our-blog/tag/strategic-it) - [Sydney (1)](https://www.enablis.com.au/our-blog/tag/sydney) - [The Y NSW (1)](https://www.enablis.com.au/our-blog/tag/the-y-nsw) - [Wearables (1)](https://www.enablis.com.au/our-blog/tag/wearables) - [Z Scaler (1)](https://www.enablis.com.au/our-blog/tag/z-scaler) - [aged care partner (1)](https://www.enablis.com.au/our-blog/tag/aged-care-partner) - [aged care technology provider (1)](https://www.enablis.com.au/our-blog/tag/aged-care-technology-provider) - [amalgamation (1)](https://www.enablis.com.au/our-blog/tag/amalgamation) - [connectivity (1)](https://www.enablis.com.au/our-blog/tag/connectivity) - [csr (1)](https://www.enablis.com.au/our-blog/tag/csr) - [cutting edge technology (1)](https://www.enablis.com.au/our-blog/tag/cutting-edge-technology) - [data (1)](https://www.enablis.com.au/our-blog/tag/data) - [ivy (1)](https://www.enablis.com.au/our-blog/tag/ivy) - [kitchen (1)](https://www.enablis.com.au/our-blog/tag/kitchen) - [malware (1)](https://www.enablis.com.au/our-blog/tag/malware) - [merger (1)](https://www.enablis.com.au/our-blog/tag/merger) - [mid size business (1)](https://www.enablis.com.au/our-blog/tag/mid-size-business) - [middle size business (1)](https://www.enablis.com.au/our-blog/tag/middle-size-business) - [mobility (1)](https://www.enablis.com.au/our-blog/tag/mobility) - [network infrastructure (1)](https://www.enablis.com.au/our-blog/tag/network-infrastructure) - [new technology (1)](https://www.enablis.com.au/our-blog/tag/new-technology) - [obk (1)](https://www.enablis.com.au/our-blog/tag/obk) - [optimal strategy (1)](https://www.enablis.com.au/our-blog/tag/optimal-strategy) - [outsourcing IT (1)](https://www.enablis.com.au/our-blog/tag/outsourcing-it) - [people with disability (1)](https://www.enablis.com.au/our-blog/tag/people-with-disability) - [race for change (1)](https://www.enablis.com.au/our-blog/tag/race-for-change) - [ransomware (1)](https://www.enablis.com.au/our-blog/tag/ransomware) - [strategy (1)](https://www.enablis.com.au/our-blog/tag/strategy) - [top managed service providers in sydney (1)](https://www.enablis.com.au/our-blog/tag/top-managed-service-providers-in-sydney) - [voice (1)](https://www.enablis.com.au/our-blog/tag/voice) - [zscaler (1)](https://www.enablis.com.au/our-blog/tag/zscaler) ### Recent Posts - [ The AI Threat Shift Is Accelerating: The 3 things Organisations Need to Know Now ](https://www.enablis.com.au/our-blog/the-ai-threat-shift-is-accelerating-what-organisations-need-to-know-now) - [ Your business runs on the browser. Your security model doesn’t. ](https://www.enablis.com.au/our-blog/your-business-runs-on-the-browser.-your-security-model-doesnt) - [ Stride Outside This September with Stride Mental Health and Enablis ](https://www.enablis.com.au/our-blog/stride-outside-this-september-with-stride-mental-health-and-enablis) - [ The Role of Enterprise Browsers in a SASE Framework ](https://www.enablis.com.au/our-blog/the-critical-role-of-enterprise-browsers-in-a-sase-framework) - [ Gartner names Palo Alto Networks Leader in 2025 EPP Magic Quadrant Report ](https://www.enablis.com.au/our-blog/gartner-names-palo-alto-networks-leader-in-epp-magic-quadrant-report) [Next](https://www.enablis.com.au/our-blog/the-4-initiatives-to-follow-for-cyber-security-awareness-month) #### Stay ahead in a connected world Get expert insights on connectivity and cybersecurity. Subscribe to the Enablis blog today. [![logo white](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/logoo%20white.svg) ](https://www.enablis.com.au/) Keeping your business connected, protected and ready for what's next. [![icon-13](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-13.svg) ](tel:+610282724000) [ +61 (02) 8272 4000 ](tel:+610282724000) [![icon-14](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-14.svg) ](mailto:info@enablis.com.au) [ info@enablis.com.au ](mailto:info@enablis.com.au) [![icon-16](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-16.svg) ](https://maps.app.goo.gl/rdnkT6SLgt1vLHRPA) [ Level 3, 16 Spring Street, Sydney, NSW, 2000 ](https://maps.app.goo.gl/rdnkT6SLgt1vLHRPA) Follow Us ###### [Connectivity](https://www.enablis.com.au/solutions/connectivity) ###### [Security](https://www.enablis.com.au/solutions/security) ###### Services ###### About Us © 2026 Enablis Pty Ltd. All rights reserved. [ Privacy Policy ](https://www.enablis.com.au/our-blog/top-5-challenges-facing-cisos-today#popup) ## Privacy Policy of Enablis ###### Why do we have a Privacy Policy? Enablis may hold and use information about you in your capacity as a consumer, a business customer, or in any other capacity. If you are visiting any of our websites or using any our services, by continuing to do so, you indicate your agreement to our use of your personal information as set out in this Privacy Policy. Your privacy is important to us. We want you to feel confident about the personal information we hold about you. Enablis takes your privacy seriously and takes all reasonable care to prevent any unauthorised access to your personal information. Enablis is committed to dealing with personal data in the spirit of the Data Protection Act 1998 (“the Act”) and protecting personal privacy in accordance with the law. ###### What does this Privacy Policy cover? This Privacy Policy only applies to how Enablis deals with your personal information. Third party websites that you can link to from Enablis’ websites are not covered by our Privacy Policy and we accept no responsibility or liability for these sites. We recommend that you check the privacy policy of any site you visit. ###### What information do we collect, and when do we collect it? In general, you can visit Enablis websites without giving us any personal information. We collect general information about visitors to our websites, to help us improve our websites and services. This includes how many visitors there are to our sites and how long they view each page. In certain circumstances we may ask for personal information about you. These include if you enter any of our competitions or promotions, subscribe to one of our services, request an audit, complete a survey, submit and enquiry or register for one of our events. We may ask you for information to enable us to provide a service to you. We collect this information in a number of ways, including via telephone, written correspondence, email and websites. If we provide a service to you, we may have information about your use of that service. ###### Cookies Enablis may use cookies to collect information from visitors to our websites. Cookies may contain personal information. A cookie is a text file which saved onto your computer when you visit a website. Your browser may allow you to choose whether to accept cookies or not, and if you choose to accept cookies, you may be able to allow different levels of acceptance. ###### Other technologies Enablis may use other technologies on our websites and in e-mail communications to determine, for example, how many visitors have visited certain pages, opened messages or clicked on links. ###### What do we do with the information we collect? We use the personal information we collect to help personalize your online experience, as well as for administration and marketing purposes. - We are obliged to do so by law; or - With your consent; or - Where necessary to provide the products and services chosen by you; or - In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets; or - If Enablis or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets. ###### Your ability to opt out You can opt out of all Marketing communications by contacting our Marketing team on telephone 02 8272 4000 or via email through our website contact page. ###### Contact Us If you have any questions or concerns about the information we hold about you and how we use it, please contact our Marketing team on telephone 02 8272 4000 or via email through our website contact page. ###### Changes to This Privacy Policy We reserve the right to change the terms of this Privacy Policy at any time. When we make changes, we shall update the version number of the policy and publish the latest policy on our websites. We encourage you to review this policy whenever you visit one of our sites. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Enablis", "url" : "https://www.enablis.com.au/our-blog/author/enablis" }, "dateModified" : "2025-06-30T07:41:21.193Z", "datePublished" : "2023-12-20T00:25:50.000Z", "headline" : "Top 5 challenges facing CISOs today and how to address them", "image" : [ "https://www.enablis.com.au/hubfs/Zero%20trust.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.enablis.com.au/our-blog/top-5-challenges-facing-cisos-today", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.enablis.com.au/hubfs/Imported%20sitepage%20images/logo-new.png" }, "name" : "Enablis PTY LTD" } } ```