What's Happening?
Toll Group, a global logistics company, is intensifying its data security measures in response to the evolving threat landscape associated with the increasing use of artificial intelligence (AI). The company is moving beyond traditional technology controls
to incorporate security requirements into vendor selection, contract management, and third-party risk governance. Vasant Prabhu, Toll Group's global data protection lead, emphasized the need for a comprehensive approach to data security, highlighting that traditional methods like firewalls and access controls are insufficient for a global supply chain. The company operates in over 50 countries and recognizes logistics as a high-risk sector, necessitating stringent security measures. This shift in strategy follows a significant cyberattack on Toll Group in 2020, underscoring the importance of proactive security measures.
Why It's Important?
The enhanced data security measures by Toll Group are crucial as they address the complexities introduced by AI in data governance. With operations spanning multiple jurisdictions, the company faces challenges related to data residency, processing regulations, and third-party interactions. The logistics sector's designation as critical infrastructure under Australia's SoCI Act adds a layer of national security implications to data breaches. By embedding security into procurement and vendor processes, Toll Group aims to mitigate risks associated with nation-state threats and evolving geopolitical alignments. This proactive stance not only protects the company's commercial interests but also safeguards national security interests, given the potential impact of data breaches on critical infrastructure.
What's Next?
Toll Group plans to continue strengthening its vendor due diligence processes and third-party access controls. The company is also increasing scrutiny on how AI technologies interact with enterprise data environments. This includes using third-party risk platforms like ProcessUnity to ensure security is a prerequisite for business engagements. As AI continues to evolve, Toll Group anticipates further adjustments to its data security strategy to address new challenges, such as those posed by Agentic AI. The company is committed to maintaining robust governance and guardrails to protect its data assets and ensure compliance with global privacy mandates.
