Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

Fortinet
06/17/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


is on for countries to protect and secure their systems. Consultation on strengthening our critical infrastructure has just closed, and Cabinet is now reviewing the feedback. Cyber security company Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, is with us now. Good morning, Nicole. You were part of some of these meetings yesterday with government officials. What did you take away from that event? Good morning, May. Yes, I was at the cyber showcase yesterday. It was an excellent event. What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance. There's real recognition that we need to get our governance settings right to make sure that we're supporting industry with the best preparation, the best positioning to be able to respond and react to these threats. On that then, how does New Zealand's governance structure compare to the likes of, let's say, Australia? What's really interesting there is Australia moved quite quickly to set up its regulatory settings. New Zealand has been historically following a much more voluntary approach, but the consultation and the reforms that are being proposed is moving that much more towards a clearer set of minimum mandatory standards. I think this is really important. Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation. $1.6 billion is a lot. You also advocate for the fact that businesses can't treat cybersecurity as a compliance exercise. Why is that? It's got to be more than compliance. It can't be a tick box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting, so that we have those settings in place that allow for industry and citizens to react and respond in real times of crisis. When you were at the showcase yesterday, did you get a gauge? Do you think New Zealand truly understands the risk here? I do. I do. I think that it is increasingly so. You have quite a network here of experts and professionals that are really dedicated towards making sure that we do get these systems and settings right. I was lucky enough to sit in on a consultation with the department, the Prime Minister and Cabinet, discussing the proposals and reforms, and with a number of other industry stakeholders. The buy-in and support for the settings that are being proposed was clear. There are some points of tension, but you would expect that in any regulatory consultation process. Fundamentally, with the outcome from yesterday, it was very clear that New Zealand has a lot of support behind it to make sure it's getting these settings right. I think what's really important is it's not just copying what Australia has done. It's taken a look at a range of different international models, and then it's making decisions that are appropriate for the New Zealand context. From a FORDinet perspective, that's what you want to see. You want to see making sure that the settings are localised and appropriate for their context. Thank you very much, Nicole. That is FORDinet's Head of Governance for Australia and New Zealand, Nicole Henry.

TL;DR

  • New Zealand is transitioning from voluntary cybersecurity guidelines to mandatory minimum standards for critical infrastructure protection, with Cabinet currently reviewing consultation feedback on proposed reforms.
  • Cybercrime costs New Zealand's economy approximately $1.6 billion annually, driving the need for governance frameworks that support education, preparation, and real-time crisis response beyond simple compliance exercises.
  • Industry stakeholders demonstrated strong support for the proposed regulatory settings during government consultations, with emphasis on developing New Zealand-specific solutions rather than copying Australia's regulatory approach.

Summary

This interview with Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, examines New Zealand's evolving approach to cybersecurity regulation following a government cyber showcase event. Henry discusses the shift from New Zealand's historically voluntary cybersecurity framework toward proposed mandatory minimum standards, drawing comparisons with Australia's more prescriptive regulatory model. With cybercrime costing the New Zealand economy approximately $1.6 billion annually, the conversation emphasizes the critical need for governance structures that go beyond compliance checkboxes to support real-time threat response. Henry highlights the collaborative consultation process between government and industry stakeholders, noting that New Zealand is developing context-appropriate regulations rather than simply replicating international models. The discussion underscores how AI-accelerated threats are driving the urgency for stronger critical infrastructure protection and clearer reporting frameworks that balance national security with economic productivity.

Chapters

0:00 - AI-Driven Threat Landscape
0:31 - Government Cyber Showcase Insights
1:13 - NZ vs Australia Governance
2:06 - Beyond Compliance Mindset

Key Quotes

0:46 "What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance."
1:46 "Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation."
2:14 "It's got to be more than compliance. It can't be a tick Box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting."

FAQ

How does New Zealand's cybersecurity governance approach differ from Australia's?

Australia moved quickly to establish prescriptive regulatory settings, while New Zealand has historically followed a voluntary approach. The proposed reforms would shift New Zealand toward clearer mandatory minimum standards, though tailored to New Zealand's specific context rather than simply copying Australia's model.

Why can't cybersecurity be treated as just a compliance exercise?

Given the accelerating pace and scale of AI-driven threats, organizations need governance frameworks that support ongoing education, preparation, and real-time crisis response capabilities—not just one-time compliance checkboxes. Effective cybersecurity requires continuous adaptation and clear reporting mechanisms that enable rapid response during actual incidents.


Categories:
  • » Webinar Library » Fortinet
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Compliance & Governance
  • Executive Briefing
  • Cloud Security
  • AI & Machine Learning
  • Interview
  • Cybersecurity Governance
  • Critical Infrastructure Protection
  • Regulatory Reform
  • AI-Accelerated Threats
  • Mandatory Security Standards
  • Government-Industry Collaboration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

              Upcoming Webinar Calendar

              • 06/23/2026
                01:00 PM
                06/23/2026
                The AI-Powered VMware Alternative
                https://www.truthinit.com/index.php/channel/2009/the-ai-powered-vmware-alternative/
              • 06/24/2026
                11:00 AM
                06/24/2026
                LATAM: Accelerating Insights on AI Through an Engaging Webinar Series
                https://www.truthinit.com/index.php/channel/2012/accelerating-insights-on-ai-through-an-engaging-webinar-series/
              • 06/25/2026
                01:00 PM
                06/25/2026
                Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier
                https://www.truthinit.com/index.php/channel/1998/generative-ai-security-preventing-ai-from-becoming-a-data-breach-multiplier/
              • 06/30/2026
                01:00 PM
                06/30/2026
                Master Active Directory Certificate Services for Long-term Success
                https://www.truthinit.com/index.php/channel/2018/master-active-directory-certificate-services-for-long-term-success/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Integrating Security in AI: Automated Red Teaming Strategies for Private Models
                https://www.truthinit.com/index.php/channel/1969/integrating-security-in-ai-automated-red-teaming-strategies-for-private-models/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Schutz von KI in Anwendungen, Agenten und APIs.
                https://www.truthinit.com/index.php/channel/2008/schutz-von-ki-in-anwendungen-agenten-und-apis/
              • 07/01/2026
                01:00 PM
                07/01/2026
                Stop Your AI from Controlling You: Strategies for Retaining Power
                https://www.truthinit.com/index.php/channel/2021/stop-your-ai-from-controlling-you-strategies-for-retaining-power/
              • 07/02/2026
                10:00 AM
                07/02/2026
                When the cloud goes dark: Resilience lessons from hybrid threats
                https://www.truthinit.com/index.php/channel/2011/resilience-insights-from-hybrid-threats-when-the-cloud-faces-challenges/
              • 07/09/2026
                01:00 PM
                07/09/2026
                Harnessing AgenticTrust in the HUMAN Experience
                https://www.truthinit.com/index.php/channel/2026/harnessing-agentictrust-in-the-human-experience/
              • 07/14/2026
                11:00 AM
                07/14/2026
                In-Depth Analysis of the Latest Features in Netwrix 1Secure
                https://www.truthinit.com/index.php/channel/2014/in-depth-analysis-of-the-latest-features-in-netwrix-1secure/
              • 07/21/2026
                04:00 AM
                07/21/2026
                Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
              • 07/22/2026
                06:30 AM
                07/22/2026
                Insights and Strategies for Effective Data Privacy and Protection Practices
                https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-for-effective-data-privacy-and-protection-practices/
              • 07/29/2026
                04:00 AM
                07/29/2026
                Real-Time Strategies for Safeguarding Against Prompt Injections
                https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
              • 09/30/2026
                04:00 AM
                09/30/2026
                AI Command Center: Optimizing Visibility and Control in Your Operations
                https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/

              Upcoming Events

              • Jun
                23

                The AI-Powered VMware Alternative

                06/23/202601:00 PM ET
                • Jun
                  24

                  LATAM: Accelerating Insights on AI Through an Engaging Webinar Series

                  06/24/202611:00 AM ET
                  • Jun
                    25

                    Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier

                    06/25/202601:00 PM ET
                    • Jun
                      30

                      Master Active Directory Certificate Services for Long-term Success

                      06/30/202601:00 PM ET
                      • Jul
                        01

                        Schutz von KI in Anwendungen, Agenten und APIs.

                        07/01/202604:00 AM ET
                        More events
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version