Lost in translation: Why Australian and New Zealand boards are still getting cyber wrong, and what it's costing them

Most cyber security failures in Australia and New Zealand don't start in the server room. They start in the boardroom.

 Despite record regulatory pressure, high-profile breaches, and escalating threats from state-based actors, too many organisations still treat cyber security as an IT problem rather than a business risk. The result is a dangerous disconnect: technical teams speak in frameworks and threat vectors, while executives and directors speak in revenue, reputation, and competitive advantage. When those two languages never fully meet, organisations are left exposed. 

Drawing on over 25 years in the industry as a CISO, ISO 27001 Senior Lead Auditor, and boardroom adviser to enterprises across Australia and New Zealand, Matt Miller shares an unfiltered view of where this translation breaks down and what it actually costs. He will explore why compliance with Australia's Essential Eight or ISO 27001 is necessary but not sufficient, how the rise of AI is accelerating both threats and board-level confusion, and what it looks like when a board truly owns cyber security as a strategic asset rather than a line item. 

Attendees will walk away with a practical approach for closing the boardroom gap, including how to speak the board's language without dumbing down the risk, how to connect day-to-day security operations to organisational resilience and growth, and what the most cyber-mature organisations across Australia and New Zealand are doing differently right now. 

Cyber transformation doesn't begin with technology. It begins with the conversation at the top of the house.