Andy Penn

We've got to eliminate the risk of any malicious cyber activity ever happening.

That's just deluding ourselves.

We don't live in a world where we sort of say, there's going to be no crime out there.

Unfortunately, there is every single day.

Houses get robbed, cars get stolen.

But the question is, is how do we...

manage our society or how do we manage our business or how do we manage our personal lives to mitigate the risk of those things happening to us?

And I think the philosophy on cybersecurity is exactly the same.

And I have a four-point plan to tackle that.

So basically, the first thing is you can't protect what you don't know that you have.

The third thing you've got to do is put together an inventory of all of your digital assets and

So what do I mean by your digital assets?

What I mean is your devices, your applications, your software, the data sets that you have online.

You're trying to protect all of your digital assets and they're all a bit different, but you've got lots of them and it's a big job.

So now I actually have an inventory of all of my digital assets.

The second thing I would say is that

not all digital assets are the same, but they are all defendable.

And by that, what I mean is that some things are more important than others, and how you choose to defend them, you could take a different approach.

So, for example...

really sensitive data.