When (Legal) Privilege Escalation Fails (Optus Case) - SecTalks SYD0x57 (88th)

# Presentation

Can organisations stop information security reports like penetration tests, vulnerability assessments and forensic investigation reports from being disclosed when the inevitable cyber incident occurs, and the lawsuits follow? Ever wonder what happens when a massive company like Optus tries to do this and keep a forensic investigation report under wraps?
Join Nicholas for a fun (and slightly cautionary) tale of what not to do after a data breach hits. He’ll break down the November 2023 Federal Court decision and May 2024 appeal that left Optus’ forensic report wide open for disclosure in litigation due to their failure to prove legal privilege over the forensic investigation report into the incident. Expect a discussion of the key legal principles, why Optus' claim of legal professional privilege failed, along with practical tips, some laughs, and important lessons on avoiding the same mistakes.

# Speaker: Nicholas Kavadias

Meet Nicholas Kavadias – the tech nerd with 20 years of experience across everything from sorting out internet helpdesk dramas to coding wizardry, wrangling databases, and tackling cyber security head-on. Oh, and he spent a few years as a solicitor, too! Now, he’s the perfect combo of cyber smarts and legal know-how. Today, he’s here to dish the dirt on one of Australia’s biggest data breaches: the 2022 Optus cyberattack. Get ready!

# Speed hiring (experimental)

There is an opportunity for potential employers to do an impromptu 10 second description of their open role. If you are interested, speak with one of the organizer before start of the session.

Please note the best way to support SecTalks and tell others about your open roles is through sponsorship. We encourage companies, small or large, specially local to come forward and support their local community.

# Sponsors

Google ( https://careers.google.com )
SecDim ( https://www.secdim.com )
TikTok ( https://www.tiktok.com/@tiktok_australia )
Atlassian (https://www.atlassian.com/)

# Notes

For sponsoring SecTalks Sydney, contact [sydney@sectalks.org](mailto:sydney@sectalks.org)
To speak at SecTalks, fill up https://sessionize.com/sectalks