What's Happening?
SUBCO, a submarine cable operator, has announced the appointment of Andrew Bacon as its joint Chief Information Officer (CIO) and Chief Information Security Officer (CISO). This strategic move aims to bolster the company's technology and cybersecurity
framework as it prepares for a significant expansion, specifically the largest subsea infrastructure build in the Indo-Pacific region. Bacon joins SUBCO from Macquarie Group, where he served for nearly seven years as a divisional director in cybersecurity. His previous experience includes developing enterprise-wide programs to enhance cybersecurity controls across over 500 critical systems and improving security operations and service management practices. He has also held positions at ING Australia and Commonwealth Bank. The announcement was made via a brief LinkedIn post by SUBCO, highlighting Bacon's role in leading the company's technology and cybersecurity strategy through its next growth phase.
Why It's Important?
This appointment is crucial for SUBCO as it embarks on a major infrastructure project, underscoring the increasing importance of robust cybersecurity and IT leadership in large-scale technological endeavors. The dual role of CIO and CISO reflects a growing trend in organizations to integrate information technology and security functions, recognizing that cybersecurity is not merely a technical issue but a fundamental component of overall business strategy and operational resilience. For the U.S. and its allies, secure subsea cable infrastructure is vital for global communication, economic stability, and national security. Any vulnerabilities in these critical assets could have far-reaching implications, including data breaches, service disruptions, and potential geopolitical risks. Bacon's extensive background in cybersecurity, particularly from a major financial institution like Macquarie Group, suggests a focus on high-level security standards and risk management, which will be essential in protecting SUBCO's expanding infrastructure and the sensitive data it carries.
What's Next?
Andrew Bacon will immediately begin leading SUBCO's technology and cybersecurity strategy, focusing on preparing these functions for the company's next phase of growth, particularly the large-scale subsea infrastructure build in the Indo-Pacific. His immediate tasks will likely involve assessing existing IT and security frameworks, identifying potential vulnerabilities, and implementing new strategies to safeguard the expanding infrastructure. This will include integrating advanced cybersecurity controls and optimizing security operations to manage the increased complexity and potential threats associated with a larger network. The company's emphasis on this joint role suggests a proactive approach to managing technological risks and ensuring the integrity and resilience of its critical infrastructure. Stakeholders, including partners and customers, will be observing how Bacon's leadership translates into enhanced security measures and operational efficiency as SUBCO progresses with its ambitious expansion plans.
Beyond the Headlines
The appointment of a joint CIO and CISO at SUBCO highlights a broader industry shift towards converging IT and cybersecurity leadership, recognizing that these two domains are inextricably linked. This integrated approach is becoming increasingly vital in an era of sophisticated cyber threats and complex digital infrastructures, especially for critical infrastructure providers like submarine cable operators. The Indo-Pacific region, where SUBCO is undertaking its major build, is a strategically important area with growing geopolitical tensions, making the security of its digital backbone paramount. This move by SUBCO could set a precedent for other companies in critical infrastructure sectors, emphasizing the need for unified leadership to manage both technological innovation and cyber risk effectively. It also underscores the increasing demand for executives with a deep understanding of both IT operations and advanced cybersecurity practices, reflecting a maturation of the digital risk landscape.
