FutureFive New Zealand logo
Consumer technology news from the future
Partner content
Story image

Why is NZ lagging behind the world in cybersecurity?

By Jessie Chiang
Tue 21 Jun 2022

A recent report by the Technology Users Association of New Zealand (TUANZ) has revealed that we are ranked 56th in the world when it comes to cybersecurity. Why are we so far behind other countries, and what must be done for us to be better?

TUANZ is a 35-year-old independent organisation that represents the people who use technology. Its CEO, Craig Young, says they want Aotearoa to be in the top 10 digitally ready nations by 2030, which includes getting up to speed on cybersecurity.

The ranking is based on the international network readiness index by the Portulans Institute - and it's not looking good for New Zealand.

"This year's report is based on 2021 research and we've dropped down to 20th from 16th," he says.

Compare that to Australia, which only dropped to 13th from 12th, while Scandinavian countries and places like Singapore rank highly. Young says the index looks at a wide range of issues, including how a country uses and develops technology, how its people use it, and whether they are being trained.

As part of its Digital Priorities Report 2022, TUANZ also interviewed 23 senior business and government leaders in New Zealand, including Kiwirail, Spark, NZ Rugby and Auckland Council.

So, just how bad is the situation?

State of cybersecurity in NZ

In 2021, 8831 incidents were reported to CERT NZ, a 13% increase on 2020. The statistics show that 15% of the incidents reported to CERT NZ included direct financial loss, with a combined total value of $16.8 million.

A survey released by Kordia's Aura Information Security last December found that more than half (55%) of Kiwi businesses have been successfully targeted by a ransomware attack in 12 months. Young says New Zealand doesn't do well regarding things like secure internet service or the more technical issues.

"It's quite sobering to think that New Zealand ranks 56th in cybersecurity and I think there's a couple of reasons for that," he says.

"I think that New Zealand companies and organisations, felt safe and secure by being down the bottom of the world. For example, for COVID-19 we were able to close our borders, because we're an island down the bottom of the Pacific Ocean. We stopped planes coming and going, and people coming and going because of our physical location."

But Young points out that this kind of thinking doesn't cut it in the cyber world.

"We're only a few milliseconds from anywhere and we are heavily connected with the rest of the world. It only takes a couple of milliseconds for a message to come or leave New Zealand," he says.

Young says a reputation of not being overly strong in cybersecurity can also make Aotearoa an attractive choice for hackers to route their messaging or software. For example, if the hacker's originating country may come up as a red flag, routing it through New Zealand is less likely to cause concern. He says while New Zealand organisations might think they're big, they're quite small.

"Overseas players can just hammer them because they have the capacity to do so, they're built to take on the big guys and our organisations aren't that big," he says.

"We've sort of sat here in a feeling of security because we're a long way away, we're small, and we don't think we've got anything of value. Well, actually, we do. It's very quick to get here and that complacency has led us to be in a place of not being overly secure."

But high-profile cyber attacks in New Zealand like the NZX and the Waikato DHB have affected how companies view cybersecurity.

Kordia's survey found just under half of IT decision-makers say their businesses take cyber security more seriously as a result of these local attacks. In addition, it found 41% had more discussion around cyber security within their organisation, while 37% expanded their cyber security team or agency. The survey also revealed that 85% of IT decision-makers considered New Zealand equally or more at risk as the rest of the world when it came to cyber-attacks, up from just 67% in 2018. But Kordia's report also found that 42% of businesses admit not running crisis simulation exercises to assess their ability to respond to a cyber-attack.

And the game is changing. 

The growth of hybrid work, spurred on by the pandemic, is another security risk.

"If I work for a large corporate and I'm working from home, suddenly I've got a device here that's connected to the general internet, not just that it's connected to my internal network," says Young.

"I think a lot of the CIOs are struggling with trying to figure out how to raise the cyber skill sets or the cyber ability within their organisations for that space."

Upskilling staff and having a talent pipeline

Young says one of the most important areas New Zealand companies need to focus on is building cybersecurity skills in its staff. He says most successful attacks on organisations often come through phishing or one person. 

"With cyber security, you can have all the firewalls or the up-to-date software that you should have, but if somebody lets somebody in, you know, it's like letting someone in the front door, they're gonna get in and go for it," he says.

The TUANZ CEO says Aotearoa also needs cybersecurity experts and a talent pipeline.

The draft of the government's Digital Technologies Industry Transformation Plan was open for consultation earlier this year, and Young hopes the final plan will have a real drive towards getting not only younger people into cybersecurity but also retraining people. He says the skills required for those working in the cyber area differ from standard IT.

"The people that you want in that area aren't necessarily the same people that you've generally hired before. They aren't necessarily people who are good at running a network. What they're good at is breaking into a network or they're good at protecting a network because they know how to break it," he says.

"They're good at ferreting things out, or they're creative. I'm not saying you have to go out and hire a hacker. I'm just saying that people have slightly different skill sets than just the standard network provider."

In TUANZ's report, the organisation said its research shows there is not enough local talent in the tech industry to meet demand and the leaders it interviewed confirmed this perspective. Globally, there were 3.5 million cybersecurity jobs unfilled in 2021, and New Zealand was part of an international scramble attract talent.

In terms of cybersecurity as a government focus though, Young says it does have to raised up the pecking order. The Australian government recently announced the appointment of a dedicated Cybersecurity Minister, Clare O'Neil.

"We don't have a minister for cybersecurity. It's not really talked about," he says.

"There are some very good people in government doing some very good things like CERT NZ, but they aren't big, they are small, and they are targeted to specific things. The government itself has to do quite a lot of work on its own security because I mean, they hold huge swathes of data for New Zealanders."

There have been several different government initiatives. For example, at the end of 2020, it launched the Digital Boost programme, which targets small business owners and aims to help them get digitally ready. The training platform offers 500 video tutorials and Q&A sessions, daily live workshops with experts and live helpdesk support. In Budget 2022, the government also set aside funding for cybersecurity, including $30m for CERT NZ and $320m for updating data and digital infrastructure for health systems. It's also developing the Digital Strategy for Aotearoa, which will be released later this year.

Young says that will show the direction the government is taking when it comes to things like cybersecurity.

Automation plays a critical role

The TUANZ CEO says things like AI and machine learning are already a huge part of beefing up cybersecurity measures.

"The people who are doing the attacking, they're using those tools. They're using those tools to change things daily, you know, to or within the hour," he says.

"If they can't get in one way or another they'll change the messaging around. So you got to fight fire with fire in this situation."

Young says companies won't be able to keep up unless they have some form of automation. He points to the NZX example, where the stock exchange was bombarded with Denial-of-Service (DoS) attacks in 2020.

"Numbers were incomprehensible compared to what they would normally see. That's where your automation comes in because it continuously bats away these things," he says.

Young says in next year's report, he's hoping Aotearoa will be out of the 50s for cybersecurity and trending through the 40s. However, he acknowledges that some things take time.

"Certainly, it's one of those things that we're definitely going to be keeping an eye on and making some noise on during the year," he says.

Public Interest Journalism Fund logo
Public Interest Journalism funded through NZ On Air.
Related stories
Top stories
Story image
Financial results
Margins & revenues up at New Zealand arm of Acer Computer
We look at the local financial statements of Taiwanese manufacturer Acer Computer Inc.
Story image
Design
Hands-on review: Phillips Hue starter kit
The set-up was one of the simplest I have ever had to do. It is also where the products shine. I was able to connect the bridge, the three lightbulbs and the strip within 10 min.
Story image
Review
Hands-on review – CleanMyMac X utility for macOS
We get hands-on with a useful utility that macOS users never thought they needed but probably do.
Story image
Gaming
Game review: Fobia – St. Dinfna Hotel
When it comes to horror video games, they usually need to have a good balance between suspense and a little bit of action.
Story image
Gaming
Game preview: The Quarry (PC)
On playing a bit of The Quarry, I began to understand why the game has got its own release rather than just being part of The Dark Pictures Anthology.
Story image
Apple
Apple’s watchOS 9 and its new features, including a medications app
The new watch0S 9 gives users more watch faces, an updated workout and sleep app and a brand new medications app.
Story image
Film review
Film review: Jurassic World Dominion
This movie is what happens when you cross a lot of hungry dinos with humanity trying desperately to redeem itself for a mistake, and boy does it try.
Story image
Cloud
Microsoft launches the Surface Laptop Go 2 with new features
Microsoft has introduced the new Surface Laptop Go 2, adding to the company’s growing portfolio of Surface Laptop devices.
Story image
Review
Hands-on review: Morphée
Life in the twenty-first century has become a 24-hour affair. Morphée promises to help restore some balance to your life.
Story image
Wireless
ComCom finds NZ broadband compares well with Australia
A new report published by the Commerce Commission has found New Zealand's Ultra-Fast Broadband (UFB) compares well to Australia's National Broadband Network.
Story image
Gaming
Hands-on review: 16GB PNY XLR8 Gaming EPIC-X 3600MHz DDR4
PNY sent over its 16GB XLR8 Gaming EPIC-X 3600MHz CL16 DDR4 module kit for testing. The kit contains two 8GB dual-channel modules with RGB lighting.
Story image
Privacy Commissioner
Aotearoa gets a new Privacy Commissioner: Michael Webster replaces John Edwards
Michael Webster, who is currently the Secretary of the Cabinet, will step into the Privacy Commissioner role on 5 July 2022.
Story image
Skills shortage
Tech salaries increase as skills shortage inflates expectations
More technology professionals will receive a pay rise this coming financial year than last, with skills shortages creating a once-in-a-career market.
Story image
Cloud
Microsoft and Manaaki Whenua to map NZ's forest cover change
Microsoft and Manaaki Whenua Landcare Research, are teaming up to develop improved detection of land use and forest cover change in New Zealand.
Story image
Cloud
Apple announces new developer tools and APIs for better app experiences
The new announcement encompasses new tools, technologies and APIs that the company says are designed to help developers create better and more involved experiences for their users.
Story image
Cybersecurity
The link between cybersecurity, extremist threat and misinformation online in Aotearoa
Long story short, it's often the case that misinformation, threat and extremism link closely to cybersecurity issues and cyber harm.
Story image
Cloud
Linktree Marketplace creates new commerce options for creators
Linktree has launched Linktree Marketplace, a new forum for users to discover all of Linktree's partners, Link Apps, and integrations in one place.
Story image
Cloud
Adobe Substance 3D updates, looks to the metaverse
A look at all of Adobe's major updates for Substance 3D and how its services are enabling businesses to get metaverse ready.
Story image
Cloud
Apple brings redesigned MacBook Air and updated MacBook Pro to market
Apple has introduced a redesigned MacBook Air and an updated 13-inch MacBook Pro, both powered by the new M2 chip.
Story image
Robotic Process Automation / RPA
Automated Guided Vehicles at seaports to grow 26% by 2027
ABI Research says the global use of Automated Guided Vehicles in seaports will exceed 150,000 deployments by 2027. Port authorities are also looking into 5G private networks.
Story image
Commerce Commission
ComCom puts electronics sector on notice over resale price maintenance
The Commerce Commission has concluded an investigation into allegations that television manufacturers were engaging in illegal resale price maintenance.
Story image
Remote Working
Hands-on review: EcoFlow River Pro Portable Power station
We get hands-on with an extremely versatile device that every remote worker or outdoor enthusiast should consider.
Story image
Cloud
Apple unveils M2 with 50% more memory bandwidth than M1
Compared to M1, M2 has an 18% faster CPU, a 35% more powerful GPU, a 40% faster Neural Engine, and delivers 50% more memory bandwidth and up to 24GB of fast unified memory.
Story image
Electricity
Canstar finds Flick Electric NZ’s favourite provider
Canstar’s annual research to find New Zealand’s favourite electricity provider reveals Flick Electric has come out on top.
Story image
Artificial Intelligence
Adobe launches AI-powered updates to Photoshop and Lightroom
Adobe says the updates use Adobe Sensei AI and machine learning to simplify complex workflows and streamline cross-device collaboration.
Story image
Digital Transformation
Publicis Sapient and The Man Cave drive digital transformation for mental health
Publicis Sapient and The Man Cave are joining forces to help support the mental health and wellbeing of young men around the world.
Story image
Christchurch
Enable launches free Wi-Fi in Christchurch city centre
Fibre broadband provider, Enable, and the Christchurch City Council have launched their new Christchurch Free Wi-Fi service in the central city. 
Story image
Cloud
Google announces new version of Chromecast with remote features
Google has announced its newest version of Chromecast, featuring a variety of new features and a new look.
Story image
Entelar
How TruSens air purifiers can create healthier workspaces
The pandemic has heightened our awareness of our own and others’ health, and made us all much more conscious of the environments we work in.
Story image
Design
Hands-on review: Samsung S22 Ultra
I have been impressed by the functions Samsung packed into this phone. I did actually make one phone call on this phone, in between trying out as many of its other uses that I could pack in.
Story image
Cybersecurity
Unknown connections: How safe is public WiFi in Aotearoa?
If it's not your own household WiFi, then who has control of your data and is your connection actually safe?
Story image
Cloud
Sony expands X-Series portable speaker range with three new models
The company says the SRS-XG300, SRS-XE300 and SRS-XE200 all contain high-quality and powerful sound pressure due to X-Balanced Speaker Units.
Story image
Cloud
Apple improves Mac operating system with latest offering
Apple has unveiled the latest version of its desktop operating system, macOS Ventura, providing users with tools for greater productivity.
Story image
Wireless
Hands-on review: JBL Quantum 610 Wireless
The new Quantum 610 gaming headset is the latest addition to JBL’s Quantum range and the successor to its popular Quantum 600 model.
Story image
Cloud
Hisense launches in New Zealand with new product range
Consumer electronics and home entertainment brand Hisense has launched in New Zealand, bringing its range of TVs, refrigeration, and laundry products to Kiwi customers.
Story image
Terramaster
TerraMaster launches its T6-423 Professional NAS with TOS 5 OS
Shenzhen-based data storage manufacturer, TerraMaster, has launched the T6-423 6-bay tower NAS.
Story image
Dark web
Cybercrime in Aotearoa: How does New Zealand law define it?
‘Cybercrime’ is a term we hear all the time, but what exactly is it, and how does New Zealand define it in legal terms?
Story image
Review
Hands-on review: Philips Hue White and Color Ambiance Starter Kit A60
Philips’ range of Hue smart lighting promises to make any home a smart home. Techday’s Darren Price checks out the Philips Hue White and Color Ambiance Starter Kit A60.
Story image
N4L
N4L, Spark, Chorus partner for Hyperfibre school upgrade
Networks for Learning (N4L) has partnered with Spark and Chorus to upgrade Wellington College to Hyperfibre, fostering stronger outcomes for students and teachers.
Story image
Web Development
Whitecliffe fosters careers for the future of tech
Do you want a career in Information Technology, Networking, Web Development, Software Development, or are you looking to upskill?
Story image
Cybersecurity
Why is NZ lagging behind the world in cybersecurity?
A recent report by TUANZ has revealed that we are ranked 56th in the world when it comes to cybersecurity - a look into why we're so behind and what needs to be done.
Story image
Broadband
Mercury launches broadband and fibre packages for NZ customers
Mercury has officially launched Mercury Broadband, giving its electricity and gas customers the ability to add fibre to their existing Mercury account.
Story image
Gaming
AMD introduces FSR 2.0 giving gaming GPUs a boost
Not only have AMD proudly announced their new line-up of Radeon RX 6000-series graphics cards, but the company has also unveiled the first games to support its FSR 2.0 technology.
Story image
InternetNZ
Govt must step up to police social media - InternetNZ boss
A technology industry leader is urging the government not to shy away from policing social media platforms in New Zealand.