Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

Fortinet
06/17/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


is on for countries to protect and secure their systems. Consultation on strengthening our critical infrastructure has just closed, and Cabinet is now reviewing the feedback. Cyber security company Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, is with us now. Good morning, Nicole. You were part of some of these meetings yesterday with government officials. What did you take away from that event? Good morning, May. Yes, I was at the cyber showcase yesterday. It was an excellent event. What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance. There's real recognition that we need to get our governance settings right to make sure that we're supporting industry with the best preparation, the best positioning to be able to respond and react to these threats. On that then, how does New Zealand's governance structure compare to the likes of, let's say, Australia? What's really interesting there is Australia moved quite quickly to set up its regulatory settings. New Zealand has been historically following a much more voluntary approach, but the consultation and the reforms that are being proposed is moving that much more towards a clearer set of minimum mandatory standards. I think this is really important. Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation. $1.6 billion is a lot. You also advocate for the fact that businesses can't treat cybersecurity as a compliance exercise. Why is that? It's got to be more than compliance. It can't be a tick box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting, so that we have those settings in place that allow for industry and citizens to react and respond in real times of crisis. When you were at the showcase yesterday, did you get a gauge? Do you think New Zealand truly understands the risk here? I do. I do. I think that it is increasingly so. You have quite a network here of experts and professionals that are really dedicated towards making sure that we do get these systems and settings right. I was lucky enough to sit in on a consultation with the department, the Prime Minister and Cabinet, discussing the proposals and reforms, and with a number of other industry stakeholders. The buy-in and support for the settings that are being proposed was clear. There are some points of tension, but you would expect that in any regulatory consultation process. Fundamentally, with the outcome from yesterday, it was very clear that New Zealand has a lot of support behind it to make sure it's getting these settings right. I think what's really important is it's not just copying what Australia has done. It's taken a look at a range of different international models, and then it's making decisions that are appropriate for the New Zealand context. From a FORDinet perspective, that's what you want to see. You want to see making sure that the settings are localised and appropriate for their context. Thank you very much, Nicole. That is FORDinet's Head of Governance for Australia and New Zealand, Nicole Henry.

TL;DR

  • New Zealand is transitioning from voluntary cybersecurity guidelines to mandatory minimum standards for critical infrastructure protection, with Cabinet currently reviewing consultation feedback on proposed reforms.
  • Cybercrime costs New Zealand's economy approximately $1.6 billion annually, driving the need for governance frameworks that support education, preparation, and real-time crisis response beyond simple compliance exercises.
  • Industry stakeholders demonstrated strong support for the proposed regulatory settings during government consultations, with emphasis on developing New Zealand-specific solutions rather than copying Australia's regulatory approach.

Summary

This interview with Fortinet's Head of Governance for Australia and New Zealand, Nicole Henry, examines New Zealand's evolving approach to cybersecurity regulation following a government cyber showcase event. Henry discusses the shift from New Zealand's historically voluntary cybersecurity framework toward proposed mandatory minimum standards, drawing comparisons with Australia's more prescriptive regulatory model. With cybercrime costing the New Zealand economy approximately $1.6 billion annually, the conversation emphasizes the critical need for governance structures that go beyond compliance checkboxes to support real-time threat response. Henry highlights the collaborative consultation process between government and industry stakeholders, noting that New Zealand is developing context-appropriate regulations rather than simply replicating international models. The discussion underscores how AI-accelerated threats are driving the urgency for stronger critical infrastructure protection and clearer reporting frameworks that balance national security with economic productivity.

Chapters

0:00 - AI-Driven Threat Landscape
0:31 - Government Cyber Showcase Insights
1:13 - NZ vs Australia Governance
2:06 - Beyond Compliance Mindset

Key Quotes

0:46 "What really got me was that, in addition to the technology discussions around AI and automation and how that's really accelerating threat, was the core focus on governance."
1:46 "Cybercrime is costing the New Zealand economy around $1.6 billion a year. These settings are essential to ensure that we're not only protecting national security, but the economic productivity of the nation."
2:14 "It's got to be more than compliance. It can't be a tick Box exercise. With the pace and scale of the threat environment that we're facing, we need to have settings that support education, preparation, clear reporting."

FAQ

How does New Zealand's cybersecurity governance approach differ from Australia's?

Australia moved quickly to establish prescriptive regulatory settings, while New Zealand has historically followed a voluntary approach. The proposed reforms would shift New Zealand toward clearer mandatory minimum standards, though tailored to New Zealand's specific context rather than simply copying Australia's model.

Why can't cybersecurity be treated as just a compliance exercise?

Given the accelerating pace and scale of AI-driven threats, organizations need governance frameworks that support ongoing education, preparation, and real-time crisis response capabilities—not just one-time compliance checkboxes. Effective cybersecurity requires continuous adaptation and clear reporting mechanisms that enable rapid response during actual incidents.


Categories:
  • » Webinar Library » Fortinet
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Compliance & Governance
  • Executive Briefing
  • Cloud Security
  • AI & Machine Learning
  • Interview
  • Cybersecurity Governance
  • Critical Infrastructure Protection
  • Regulatory Reform
  • AI-Accelerated Threats
  • Mandatory Security Standards
  • Government-Industry Collaboration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Fortinet: New Zealand's Cybersecurity Governance Reforms Explained

              Industry Events (Sponsor Hosted)

              • Aug
                03

                Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.

                08/03/202611:00 AM ET
                • Aug
                  06

                  Safeguarding Sensitive Data in the Era of Public AI Platforms

                  08/06/202604:00 AM ET
                  • Aug
                    06

                    AI Agents Revolutionizing Identity Attacks: Same Tactics, Enhanced Speed

                    08/06/202602:00 PM ET
                    More events

                    Upcoming Webinar Calendar

                    • 08/03/2026
                      11:00 AM
                      08/03/2026
                      Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.
                      https://www.truthinit.com/index.php/channel/2062/discover-dlp-memories-the-ever-evolving-triage-agent-enhancing-efficiency-each-shift/
                    • 08/06/2026
                      04:00 AM
                      08/06/2026
                      Safeguarding Sensitive Data in the Era of Public AI Platforms
                      https://www.truthinit.com/index.php/channel/2058/safeguarding-sensitive-data-in-the-era-of-public-ai-platforms/
                    • 08/06/2026
                      02:00 PM
                      08/06/2026
                      AI Agents Revolutionizing Identity Attacks: Same Tactics, Enhanced Speed
                      https://www.truthinit.com/index.php/channel/2064/ai-agents-revolutionizing-identity-attacks-same-tactics-enhanced-speed/
                    • 08/13/2026
                      12:00 PM
                      08/13/2026
                      Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada
                      https://www.truthinit.com/index.php/channel/2065/harnessing-ai-for-secure-innovation-in-the-enterprise-with-netskope-omada/
                    • 08/19/2026
                      12:00 PM
                      08/19/2026
                      Becoming Agent Ready: Insights and Strategies with Cyera
                      https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-and-strategies-with-cyera/
                    • 09/02/2026
                      12:00 PM
                      09/02/2026
                      Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                      https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                    • 09/30/2026
                      04:00 AM
                      09/30/2026
                      AI Command Center: Optimizing Visibility and Control in Your Operations
                      https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                    Truth in IT
                    • Sponsor
                    • About Us
                    • Terms of Service
                    • Privacy Policy
                    • Contact Us
                    • Preference Management
                    Desktop version
                    Standard version