Topic
Beyond Prevention: Lessons from Two Years in the CISO Seat
When: Monday, 14 September 2026, 12:00 pm – 2:00 pm (NZST)
Where: Pavilion Room (Ground Floor), ANZ Centre, 23 Albert Street, Auckland
Format: In Person Only
Dear ISACA Auckland Chapter Members,
The ISACA Auckland SheLeadsTech team is pleased to announce our next in-person event, to be held at ANZ Centre on Monday 14 September 2026 from 12:00 pm to 2:00 pm.
Topic
Two years into the CISO seat, the lessons that stuck were rarely the technical ones.
Join us for this lunchtime session with Nyuk Loong Kiw, Group CISO at Spark New Zealand, as he unpacks the three lessons that cost the most to learn: that prevention alone is a losing bet and resilience is what boards are actually buying; that friction is a security metric in its own right — when the secure path is the slow path, staff route around it and shadow IT is the receipt; and that the “hero” CISO who personally firefights every issue burns the team out long before burning out themselves.
Then the harder question: what happens to all of this when AI agents enter the environment? Autonomous workflows can be hijacked through indirect prompt injection and compromised tooling. Agents sharing human credentials destroy attribution and leave audit trails that prove nothing. Exposure management has to shift from patching by severity score to validating which attack paths are genuinely exploitable.
The session closes on practical ground — controls organisations should consider, and the questions assurance teams should be asking now, rather than after the first incident.
Why Attend
-
Understand why resilience, not just prevention, is what boards are really assessing
-
Learn how friction functions as a security metric in its own right
-
Explore the emerging risks AI agents introduce to identity, audit trails, and exposure management
-
Network with fellow risk, audit, and assurance professionals
Speaker
Nyuk Loong Kiw is Group Chief Information Security Officer at Spark New Zealand, the country’s largest telecommunications and digital services provider. He leads Spark’s Cyber Security Centre of Excellence and the 100-strong Cyber Defence Tribe, reporting to the Executive Leadership Team, with cybersecurity governance exercised through the Spark Board’s Audit & Risk Management Committee. Kiw moved into security leadership in early 2015 and is known for being pragmatic, hands-on, and having a healthy sense of humour.
With 23 years of continuous cybersecurity experience in the NZ telco sector, Kiw built and still leads New Zealand’s largest and most mature Security Operations Centre and established the country’s first FIRST.org-member Security Incident Response Team. His current focus spans board-level cyber risk reporting, post-incident transformation, and the application of AI and automation to lift overall security effectiveness.
Recognised as iSANZ Best Senior Security Practitioner in 2022, he continues to play an active role contributing to the New Zealand cybersecurity community.
LinkedIn: linkedin.com/in/nyuk-loong-kiw-52853298
Venue
ANZ Centre
Pavilion Room (Ground Floor)
23 Albert Street
Auckland
Please register via the ISACA Auckland Chapter Engage site. Due to venue limitations, seats are limited and available on a first-come, first-served basis. If you can no longer attend, please withdraw your registration as soon as possible so another member may attend.