Suggestions
Jeff Paine
Digital Innovation Lead - AWS
Jeff Paine is a professional currently working at Amazon Web Services (AWS) as the Digital Innovation Lead for the ANZ Public Sector.1 He has extensive experience in the technology and cybersecurity fields, with a focus on cloud computing and digital transformation.
Professional Background
Jeff Paine serves as a mentor and advisor to startups, scale-ups, and investors in the Cyber and SaaS/platform technologies sectors.1 His expertise extends to assisting with C-suite and board requirements, indicating a high level of strategic involvement in business operations.
Industry Involvement
Paine is actively engaged in the information security community. He has been involved in speaking engagements, such as the 'InfoSec 2024' conference, demonstrating his thought leadership in the field.2
Areas of Expertise
- Cloud Computing: Given his role at AWS, Jeff has significant experience in cloud technologies and their application in the public sector.
- Cybersecurity: His LinkedIn username (jpinfosec) and involvement in cybersecurity conferences suggest a strong background in information security.12
- Digital Innovation: His current position focuses on driving digital innovation, particularly in the public sector of Australia and New Zealand.
- Mentorship: Paine's advisory roles indicate he values sharing knowledge and supporting emerging businesses in the tech industry.1
Jeff Paine's career demonstrates a blend of technical expertise, strategic thinking, and industry leadership, particularly in the areas of cloud computing, cybersecurity, and digital transformation within the public sector.
Highlights
With everything else going on in the media, I'm finding my normal news is disappearing well below the fold. So a belated congrats to Luke Anear and the SafetyCulture team, it's good to know that a long road travelled is still a worthwhile journey
It's not the first time security vendors have been accused of leaking and over-sharing, but the problem is actually much broader than just this one example incident or vendor (remember hospital data in demos?). In this case, sensitive info was transmitted to external security scanning services - arguably required to detect malware/viruses, but data exfiltration occurred (and would have bypassed DLP). This design is becoming more common - but is it the right design?
For the enterprise, this highlights a challenge that exists with many security solutions - do you disable such features and risk missing something; or turn on all the features and maybe inadvertently share sensitive data externally? If an employee exposed/leaked files via random Internet scanners, is that any different?
Security vendors could be doing more to protect customers by collecting/sharing less data themselves, and being more transparent about where the data goes. It's not good enough to over-collect and over-share "just because you can", particularly if the enterprise is not aware it's happening. Security technologies hold a privileged role of access and trust. As corporate reliance on security tech grows, data leakage or breach via security tech is a real and growing risk.
