Lessons from Jeff Whitton - Safeguarding Your Crown Jewels
Protecting your organisation’s most valuable assets - your “crown jewels” - is not just a best practice; it’s essential for long-term success. Drawing insights from Jeff Whitton, an experienced leader in cybersecurity and governance, we explore why understanding and securing these assets is critical for organisational resilience.
What are your Crown Jewels?
Your crown jewels are the critical assets that, if compromised, could disrupt or even halt your business operations. Identifying them is the first step toward ensuring your organisation’s sustainability and security. While these vary from business to business, common crown jewels for local councils include:
Financial Systems
Local councils rely on financial management systems to oversee budgets, rates collection, grants, and vendor payments. A security breach could lead to financial mismanagement, fraud, or regulatory non-compliance, impacting essential services and public trust.Critical Infrastructure
Councils manage key infrastructure such as water treatment plants, transport networks, and public facilities. Cyber threats, equipment failures, or data breaches in these systems can disrupt essential services, endanger public safety, and lead to costly recovery efforts.Proprietary Information & Intellectual Property (IP)
Councils develop urban planning strategies, environmental policies, and innovative community programs. If these confidential plans or strategic data are exposed, it could undermine decision-making processes and lead to competitive disadvantages in regional development.Resident & Employee Data
Councils handle large volumes of personal data, including ratepayer details, permit applications, and employee records. Protecting this information is crucial to maintaining public trust and complying with privacy regulations such as the Privacy Act and Local Government Act.Operational Processes & Business Continuity Plans
Local councils must ensure continuity in service delivery, from waste management to emergency response coordination. If business continuity plans are compromised, councils may struggle to respond effectively to crises, delaying recovery efforts and increasing community impact.
Why protecting them is critical
Jeff Whitton emphasises that failing to safeguard your crown jewels can lead to severe financial losses, reputational damage, legal repercussions, and business continuity risks. A single vulnerability - whether from cyber threats, natural disasters, or human error - can have long-lasting consequences.
How to protect your Crown Jewels
Maintain an up-to-date Asset Register to track all critical systems, data, and intellectual property.
Regularly review and update the register as your organisation evolves.
Identify potential vulnerabilities and threats to your critical assets.
Conduct risk assessments.
Prioritise the risks based on business impact and likelihood of threats.
Adopt a multi-layered security approach, including encryption, access controls, and network monitoring.
Regularly update software and hardware to mitigate emerging vulnerabilities.
Have a documented response plan (DRP) to address security incidents swiftly.
Continuously refine the DRP based on lessons learned from past events and evolving threats.
Promote a security-first culture by ensuring employees are aware of policies and best practices.
Conduct regular training to keep staff prepared for potential security risks.
As Jeff Whitton’s expertise demonstrates, proactive protection is the key to future-proofing your business in an increasingly complex digital world.
