If you're not preventing cybercrime, you're standing at a crime scene: Palo Alto

Palo Alto Networks federal chief security officer John Davis has commended the Australian government on its cybersecurity strategy but warned that not focusing on prevention is like standing at a crime scene.

Davis – a retired US military officer with 35 years' experience who has also worked for the Pentagon and has experience in both strategy and policy – was speaking at the security vendor's Cyber Security Summit last week in Sydney.

In the strong cyber defences category, the government states plans to better "detect, deter and respond" to cybersecurity threats policy and better anticipate risks.

"I would personally like to see more on the prevention side. We at Palo Alto Networks are in the prevention business and I would like to see more on that because if you are only focusing on detect and respond you are standing at a crime scene and that is not good enough anymore. The threat is very serious these days," Davis said.

Davis said he believed prevention could be a deterrent but he would like to see a more well-articulated prevention policy.

He believes the roadmap for a cyber defence strategy has five steps: planning, organising, implement the plan effectively, having the right people and leaders to drive the plan to success, and international context.

Davis explained the importance of the relationship with key foreign partners because "the cyber problem isn’t confined to the borders of a country".

As part of its cyber security strategy, the Australian government announced it would invest more than $230 million until 2020 to enhance Australia’s cyber security capability and deliver new initiatives.

According to the government, more than 9500 cybercrimes were reported to the Australian cybercrime online reporting network in its first three months of operation. The Australian Signals Directorate responded to 37 percent more government cybersecurity incidents in 2014 compared to previous years.

In Davis' opinion, there isn't one cybersecurity strategy that will suit every country. "Australia has done an exceptional job of tailoring the organisational structure to its unique need," he said.

He was also impressed with the mention of actions already taken by the government, in his opinion this is a good sign as the country is not starting from square one.

Pictured: John Davis, Palo Alto Networks