qantas group cyber security policy

He is currently in the role of Group Chief Information Security Risk Officer at Standard Chartered Bank, based in Singapore with a global scope. 3.1 QFF was established in 1987, and had over 11.4 million members in June 2016. The Group has continued to deliver safe aircraft operations through programs such as: The safety and wellbeing of our customers and people is our highest priority. 4.40 The implementation of privacy risk management processes is integral to establishing robust and effective privacy practices, procedures and systems. [6] As well as earning and redeeming Qantas Points, QFF membership allows members to earn Status Credits. 4.18 Good privacy management requires the development and implementation of robust and effective internal policies, practices, procedures and systems that ensure the handling of personal information is in line with QFFs privacy obligations. Read about our approach to risk management. Oct 2016 - Present6 years 4 months. This includes aviation safety, WHS, environment, security (including cyber security) and business resilience matters. 4.54 All new projects require a security impact assessment (SIA), and staff have access to the relevant form on the Qantas Intranet. The OAIC recommends that QFF develops and implements a PMP that sets out specific goals and objectives for its privacy management with consideration of the specific issues that apply to its operations. The Qantas Group is constantly improving its cyber capabilities as part of its overall data and privacy protection. Environment Policy; 6. IT Security Specialist, Security Officer, Security Engineer and more on Indeed.com Cyber Security Jobs in Sydney Western Suburbs NSW (with Salaries) 2022 | Indeed.com Australia To comply with our legal obligations and for health, safety and security purposes: to ensure the safety and security of all passengers, including investigating security and screening issues and to take appropriate steps to prioritise the health of those passengers and our crew. Cyber Security Policy; 5. SecurityScorecard collects billions of signals each week, helping organizations see risks, get more actionable information, and respond faster to keep up with threat actors. 4.84 Data analytics involves amassing, aggregating and analysing large amounts of data. QFF Legal reports to the Qantas Group General Counsel, who has ultimate responsibility for all privacy compliance matters in the Qantas Group. Incident notifications may come from a variety of channels. All projects require sign-off by Legal and staff are encouraged to approach them early in the process. :The cyber safety of Qantas Frequent Flyers is a priority for us. Flexible deposit conditions. It operates through five segments: Qantas Domestic, Qantas International, Jetstar Group, Qantas Loyalty, and Corporate. The OAIC also suggests, due to the varied and complex nature of such assessments, that QFF regularly revisit and revaluate their privacy assessment mechanisms. 4.70 The OAIC considers QFF to have an adequate and effective privacy training regime and suggests that it regularly reviews its training to ensure that it remains effective and appropriate. simplifies the notice to enhance readability, changes the title from important information to something that indicates to potential members that the notice relates to the collection of their personal information. Whether travelling for business or leisure, we understand that every group has unique travel needs; and that's why we offer a range of benefits available exclusively to group travellers to help make your customers journey a seamless one. Executive Summary. However, the OAIC notes that it is heavily dependent on key staff involved and is not recorded unless it forms part of the SIA or includes written advice from Legal. To report security or privacy issues affecting The Emirates Group products or web servers, you can contact security@emirates.com. Australia's largest domestic and international airline, Qantas, needed a holistic security solution that would not only protect remote workers, but also support its secure access service edge (SASE) initiative. highlights the QFF/Woolworths relationship. by KirkpatrickPrice / March 29th, 2021 . It identifies specific, measurable privacy goals and targets and sets out how an entity will implement the four steps outlined in the OAICs Privacy management framework and meet its goals for managing privacy. Complaints files are assigned priorities, which determine team allocation and due date for response. (1) This Policy: Defines Victoria Universitys high-level information security requirements based on the ISO 27001:2013 standard, NIST Cybersecurity Framework and other industry best practices, enabling the University to minimize information security risk and efficiently respond to incidents. QFF advised that this trial was being expanded and QFF would eventually roll out multi-factor authentication to all members. Enterprise security management (ESM) issues directly revolve around the management of Qantas group itself. The Group Policies apply to Qantas Group entities and employees in line with the Groups Corporate Governance Framework. The Prime Minister's $230 million Cyber Security Strategy The Australian Crime Commission estimates the annual cost of cyber crime to His appointment as Qantas group CISO was part of a significant revamp of the cyber security function at the airline. 4.78 As stated above, QFF holds all personal information in data warehouses, with highly restricted access. The communications are then matched to member personal information by a separate team. 4.66 As a part of Qantas financial and corporate governance reporting requirements, the Group Audit Team regularly checks the QFF training logs, which are managed by the Qantas Human Resources Department. The OAIC also notes that Qantas Group intends to create a network of privacy champions, co-ordinated through the Group Privacy Officer. 4.5 APP 1.2 requires an entity to take reasonable steps to implement practices, procedures and systems that will: 4.6 Qantas Group has a number of group-wide policy documents that are applicable to all of its business units, including QFF. We ensure the safety and welfare of our people, the protection of our reputation and the maintenance of critical services. Qantas Group also holds monthly direct reporting meetings, and risk is a regular agenda item. 4.65 Training is conducted through an internal online training database. The OAIC recommended that QFF: 2.1 Loyalty programs are popular with consumers and businesses alike, with one Australian consumer research study reporting that 87 percent of Australians aged 18 and older were members of a loyalty program in 2017. Staff are required to undertake a SIA at the beginning of a new project to identity any privacy and security risks. Maintaining a strong security program is an investment that your prospects will want to know about. QFF regards personal information as its chief business asset and has invested multiple resources to safeguard it. A data breach will trigger a crisis response, the extent of which depends on the nature and severity of the breach. The shark tank proceedings are not recorded. Legal Matter Policy; 8. As part of meeting its obligations under APP 1.2, QFF should develop and implement a PMP, to be reviewed annually, that sets out specific goals and objectives for its privacy management with consideration of the specific issues that apply to its operations. The Qantas Group is constantly improving its cyber capabilities as part of its overall data and privacy protection. Past crises are often used in staff training. If a query relates to a QFF membership, then the call is referred to the QFF specific customer care team. The Main Types of Security Policies in Cybersecurity. Crisis response is heavily reinforced in staff training and practice exercises, and involves staff at all levels, including the executive. weather underground professors; police log somersworth nh; ravel hotel trademark collection by wyndham yelp; accelerometer shake detection algorithm; gilded iguana hunting florida; Close Menu. 4.11 QFF complaints are received centrally through the Qantas customer care centre by phone or online and are directed to the relevant customer care teams. The ability to respond seamlessly to events that impact the Group is fundamentally important in ensuring continued Group operations in the event of a discontinuity of service, mitigating risks and minimising disruptions to our customers. Additionally, where new practices evolve, the OAIC suggests that these practices, and the reasons behind them, are appropriately documented. 3.3 Member registration is conducted online, either directly through the QFF website or through a link on a program partner website. [2] Building on these assessments, the OAIC decided to assess other popular loyalty schemes in Australia. Like many large organisations, we operate in an environment of ever-evolving cyber threats, where external attackers are always adopting more sophisticated techniques. [3] QFF is run by Qantas Loyalty, a business unit within Qantas Airways Limited (Qantas). Safe growth: The Qantas Group has announced orders for a range of new aircraft. Qantas has ordered 20 Airbus A321XLRs and 20 A220-300s narrow jets. 4.71 During the assessment, the OAIC was advised of the security controls applied to QFFs systems. We comply with government and regulatory agencies to integrate risk strategies through a holistic approach ensuring a robust framework is in place to counter any crisis management, contingency planning and business continuity event. Where privacy complaints are received outside of this process (including by phone or by mail), a file/record is created in the complaints handling system. Qantas suffered a 30 percent turnover in its technology personnel as the airline battles staff loss, in the wake of repeated Covid-19 lockdowns. 4.28 Business units obtain advice and assessments of privacy related matters from the Legal team via formal PIAs, written email advice and oral advice given in pre-arranged meetings. The Qantas Groups FY21 performance for Total Recordable Injury Frequency Rate and Lost Work Case Frequency Rate both improved compared to the prior year. Our Fraud and Scams teams are monitoring 24/7 for any suspicious activity across the Westpac Group, using industry best practice security and fraud detection techniques. Additionally, there are contractual terms in place, which stipulate that only QFF may contact its members in relation to a program partner. Spoiler alert: SecurityScorecard customers realize investment payback in under a quarter. A select team within QFF have sole access to QFF member information (e.g. 2.3 In the 2014/2015 financial year, the OAIC assessed two leading loyalty programs in Australia. Contester Contravention Repentigny, The Qantas Groups FY21 performance for Total Recordable Injury Frequency Rateimproved compared to the prior year, while our Lost Work Case Frequency Rate was slightly higher. Possible adverse regulatory impacts, such as Commissioner Initiated Investigation (CII), public sanctions (CII report) or follow up assessment activities. generate consumer insights, which may include combining personal information from third parties or public sources (for example, Census data). QFF, as a business unit, would have the opportunity to share its learnings, as well as to learn from the experiences of other business units. 4.73 The OAIC particularly welcomes the use of multi-factor authentication and encourages QFF to continue its expansion. To do this, they must give Woolworths their QFF membership number so that Woolworths can arrange for the Qantas Points to be awarded. The card is posted to the members nominated postal address. [9] Where data analytics involves personal information, entities must ensure they are complying with the requirements of the Privacy Act. With the assistance of the Qantas Group Cyber Security Centre, the website was detected not long after it was built and we have worked with the internet service provider to take it down. Its current APP 5 collection notification practices appear reasonable and adequate. However, each of WER and QFF remain solely responsible for communicating with their own members. 4.31 Compliance with APP 1.2 is fundamentally about good privacy governance. 6.7 The OAIC conducted a risk-based assessment of QFF and focused on identifying privacy risks to the effective handling of personal information in accordance with privacy legislation. Marketing campaigns are sent to different member lists. Please refer to Qantas Group Policies available on the Qantas Intranet or from your manager or people representative for details.