Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

Fortinet
06/17/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


is on for countries to protect and secure their systems. Consultation on strengthening our critical infrastructure has just closed, and Cabinet is now reviewing the feedback. Cyber security company Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, is with us now. Good morning, Nicole. You were part of some of these meetings yesterday with government officials. What did you take away from that event? Good morning, May. Yes, I was at the cyber showcase yesterday. It was an excellent event. What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance. There's real recognition that we need to get our governance settings right to make sure that we're supporting industry with the best preparation, the best positioning to be able to respond and react to these threats. On that then, how does New Zealand's governance structure compare to the likes of, let's say, Australia? What's really interesting there is Australia moved quite quickly to set up its regulatory settings. New Zealand has been historically following a much more voluntary approach, but the consultation and the reforms that are being proposed is moving that much more towards a clearer set of minimum mandatory standards. I think this is really important. Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation. $1.6 billion is a lot. You also advocate for the fact that businesses can't treat cybersecurity as a compliance exercise. Why is that? It's got to be more than compliance. It can't be a tick box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting, so that we have those settings in place that allow for industry and citizens to react and respond in real times of crisis. When you were at the showcase yesterday, did you get a gauge? Do you think New Zealand truly understands the risk here? I do. I do. I think that it is increasingly so. You have quite a network here of experts and professionals that are really dedicated towards making sure that we do get these systems and settings right. I was lucky enough to sit in on a consultation with the department, the Prime Minister and Cabinet, discussing the proposals and reforms, and with a number of other industry stakeholders. The buy-in and support for the settings that are being proposed was clear. There are some points of tension, but you would expect that in any regulatory consultation process. Fundamentally, with the outcome from yesterday, it was very clear that New Zealand has a lot of support behind it to make sure it's getting these settings right. I think what's really important is it's not just copying what Australia has done. It's taken a look at a range of different international models, and then it's making decisions that are appropriate for the New Zealand context. From a FORDinet perspective, that's what you want to see. You want to see making sure that the settings are localised and appropriate for their context. Thank you very much, Nicole. That is FORDinet's Head of Governance for Australia and New Zealand, Nicole Henry.

TL;DR

  • New Zealand is transitioning from voluntary cybersecurity guidelines to mandatory minimum standards for critical infrastructure protection, with Cabinet currently reviewing consultation feedback on proposed reforms.
  • Cybercrime costs New Zealand's economy approximately $1.6 billion annually, driving the need for governance frameworks that support education, preparation, and real-time crisis response beyond simple compliance exercises.
  • Industry stakeholders demonstrated strong support for the proposed regulatory settings during government consultations, with emphasis on developing New Zealand-specific solutions rather than copying Australia's regulatory approach.

Summary

This interview with Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, examines New Zealand's evolving approach to cybersecurity regulation following a government cyber showcase event. Henry discusses the shift from New Zealand's historically voluntary cybersecurity framework toward proposed mandatory minimum standards, drawing comparisons with Australia's more prescriptive regulatory model. With cybercrime costing the New Zealand economy approximately $1.6 billion annually, the conversation emphasizes the critical need for governance structures that go beyond compliance checkboxes to support real-time threat response. Henry highlights the collaborative consultation process between government and industry stakeholders, noting that New Zealand is developing context-appropriate regulations rather than simply replicating international models. The discussion underscores how AI-accelerated threats are driving the urgency for stronger critical infrastructure protection and clearer reporting frameworks that balance national security with economic productivity.

Chapters

0:00 - AI-Driven Threat Landscape
0:31 - Government Cyber Showcase Insights
1:13 - NZ vs Australia Governance
2:06 - Beyond Compliance Mindset

Key Quotes

0:46 "What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance."
1:46 "Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation."
2:14 "It's got to be more than compliance. It can't be a tick Box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting."

FAQ

How does New Zealand's cybersecurity governance approach differ from Australia's?

Australia moved quickly to establish prescriptive regulatory settings, while New Zealand has historically followed a voluntary approach. The proposed reforms would shift New Zealand toward clearer mandatory minimum standards, though tailored to New Zealand's specific context rather than simply copying Australia's model.

Why can't cybersecurity be treated as just a compliance exercise?

Given the accelerating pace and scale of AI-driven threats, organizations need governance frameworks that support ongoing education, preparation, and real-time crisis response capabilities—not just one-time compliance checkboxes. Effective cybersecurity requires continuous adaptation and clear reporting mechanisms that enable rapid response during actual incidents.


Categories:
  • » Webinar Library » Fortinet
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Compliance & Governance
  • Executive Briefing
  • Cloud Security
  • AI & Machine Learning
  • Interview
  • Cybersecurity Governance
  • Critical Infrastructure Protection
  • Regulatory Reform
  • AI-Accelerated Threats
  • Mandatory Security Standards
  • Government-Industry Collaboration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Jul
                    14

                    Crafting a Championship-Caliber Security Team for Lasting Defense

                    07/14/202601:00 PM ET
                    • Jul
                      14

                      Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data

                      07/14/202602:00 PM ET
                      • Jul
                        22

                        Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

                        07/22/202601:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 07/14/2026
                          01:00 PM
                          07/14/2026
                          Crafting a Championship-Caliber Security Team for Lasting Defense
                          https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-caliber-security-team-for-lasting-defense/
                        • 07/14/2026
                          02:00 PM
                          07/14/2026
                          Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data
                          https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-safeguarding-ai-accessible-data/
                        • 07/21/2026
                          04:00 AM
                          07/21/2026
                          Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                          https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
                        • 07/22/2026
                          06:30 AM
                          07/22/2026
                          Insights and Strategies in Data Protection and Privacy Management
                          https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-in-data-protection-and-privacy-management/
                        • 07/22/2026
                          01:00 PM
                          07/22/2026
                          Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue
                          https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
                        • 07/28/2026
                          01:00 PM
                          07/28/2026
                          Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                          https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                        • 07/29/2026
                          04:00 AM
                          07/29/2026
                          Real-Time Strategies for Safeguarding Against Prompt Injections
                          https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                        • 07/29/2026
                          01:00 PM
                          07/29/2026
                          Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                          https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                        • 08/19/2026
                          12:00 PM
                          08/19/2026
                          Becoming Agent Ready: Insights from Cyera's Expertise
                          https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version