• Published on
    As 2024 comes to a close, here's something we hear constantly from our clients...  In a market-driven economy, when hiring candidates, the most important is to find their VALUE proposition that improves the company's performance (in sales, customer services, innovation, etc).  
    What you need:
    - Results-focused mindset
    - Innovative thinkers, who are unafraid of changing legacy ways of working
    - Agile leaders who can adapt and evolve with the changing customer needs


    Finding talent who can "get it done" is crucial.

    Passion without skills is a ineffective
    Work without Passion is meaningless
    Passion + work = having a meaning in life.

    Adapted from  https://www.linkedin.com/posts/george-stern_stop-hiring-and-promoting-the-wrong-people-activity-7274771570122747904-HkUb?utm_source=share&utm_medium=member_desktop

    https://www.linkedin.com/in/george-stern
  • Published on
    **The Importance of Cyber Security in Today’s Digital World: Protecting Your Digital Life**

    In an age where our lives are increasingly intertwined with technology, the importance of cyber security cannot be overstated. From personal emails to online banking, social media to business transactions, we rely heavily on digital platforms for convenience and efficiency. However, with this growing digital footprint comes a heightened risk of cyber threats that can have devastating consequences for individuals and organizations alike. In this blog post, we’ll explore the critical importance of cyber security, the risks posed by cyber threats, and actionable steps you can take to protect your digital assets.

    ### The Growing Relevance of Cyber Security

    Cyber security has become a top priority in our digitally driven world. With the exponential growth of internet users—over 5 billion people are online as of 2024—cyber threats have also become more sophisticated and prevalent. The digital landscape is a vast, interconnected web, where both opportunity and risk coexist. While technology has transformed how we live, work, and communicate, it has also opened the door to cybercriminals who are constantly seeking new ways to exploit vulnerabilities. According to Cybersecurity Ventures, global cybercrime costs are expected to reach $10.5 trillion annually by 2025. This alarming statistic highlights the urgent need for individuals and businesses to fortify their defenses against potential cyber attacks.

    ### Key Statistics and Recent Incidents That Highlight the Risks

    Several high-profile cyber attacks in recent years have underscored the critical need for robust cyber security measures. For instance, in 2020, the SolarWinds attack—one of the most sophisticated and damaging cyber espionage campaigns ever—compromised the data of several U.S. government agencies and private companies. Similarly, the Colonial Pipeline ransomware attack in 2021 led to fuel shortages across the Eastern United States, showcasing the real-world impact of cyber threats on critical infrastructure.

    Some key statistics that emphasize the urgency of the matter include:
    - In 2023, 68% of business leaders reported increased cyber risks due to digital transformation and remote work models.
    - According to IBM’s "Cost of a Data Breach" report, the average cost of a data breach reached $4.35 million in 2022.
    - A report by Cybersecurity Ventures projects that a business will fall victim to a ransomware attack every 11 seconds by 2024.

    These statistics and incidents are stark reminders that cyber threats are not just an IT issue but a business risk, a personal risk, and, indeed, a societal risk.

    ### Common Types of Cyber Threats

    Understanding the landscape of cyber threats is the first step toward defending against them. Here are some of the most common types of cyber threats:

    #### 1. **Phishing Attacks**

    Phishing remains one of the most common and effective types of cyber threats. These attacks often involve fraudulent emails or messages designed to trick individuals into divulging sensitive information, such as login credentials or financial details. A well-known example is the 2020 Twitter hack, where attackers used a phone spear-phishing attack to gain access to Twitter's internal tools, compromising high-profile accounts, including those of Barack Obama, Elon Musk, and others.

    #### 2. **Ransomware**

    Ransomware is a type of malware that encrypts a victim's files, with the attacker demanding a ransom to restore access. One of the most notable ransomware attacks occurred in 2017 with WannaCry, which affected over 200,000 computers across 150 countries. The attack caused an estimated $4 billion in financial losses and disrupted critical services, including the UK’s National Health Service.

    #### 3. **Data Breaches**

    A data breach involves unauthorized access to confidential data, often leading to the loss of sensitive information such as personal, financial, or health records. The infamous Equifax breach in 2017 exposed the personal data of 147 million Americans and resulted in a settlement of up to $700 million—the largest settlement for a data breach in U.S. history.

    ### Practical Tips to Enhance Cyber Security

    Given the ever-evolving nature of cyber threats, it is crucial for both individuals and businesses to adopt proactive measures to bolster their cyber security posture. Here are some best practices to consider:

    1. **Strengthen Password Management**

    - Use complex and unique passwords for different accounts.
    - Employ a reputable password manager to generate and store passwords securely.
    - Enable multi-factor authentication (MFA) wherever possible to add an extra layer of security.

    2. **Keep Software and Systems Updated**

    - Regularly update operating systems, browsers, and software applications to patch vulnerabilities.
    - Enable automatic updates to ensure timely installations of security patches.

    3. **Educate and Train Employees**

    - Conduct regular cyber security awareness training sessions to educate employees about phishing, ransomware, and social engineering attacks.
    - Implement simulated phishing exercises to test employees’ awareness and readiness.

    4. **Use Robust Anti-Malware and Firewall Protections**

    - Install reputable antivirus and anti-malware software to detect and neutralize threats.
    - Use firewalls to protect internal networks from external attacks.

    5. **Back Up Data Regularly**

    - Regularly back up important data and ensure backups are stored securely and offline.
    - Test backups periodically to ensure data integrity and recoverability.

    Conclusion

    In an increasingly digital world, cyber security is not a luxury—it is a necessity. The consequences of inadequate cyber security measures can be devastating, ranging from financial loss and reputational damage to operational disruption and legal repercussions. By understanding the nature of cyber threats and implementing best practices for cyber security, individuals and businesses can significantly reduce their risk and protect their digital assets. Remember, cyber security is a shared responsibility—proactive steps taken today can safeguard the future.

    Taking these steps seriously and remaining vigilant is the key to staying safe in the digital age. Stay informed, stay secure, and most importantly, stay ahead of the threats.
  • Published on
    Law Asia's article on New personal data privacy framework for Hong Kong AI has insights about PCPD 
    Besides the recommendations on regular audits, governance and frameworks to ensure compliance to the policy, companies also must evaluate if their staff are aware of the wide-ranging implications of this new law.
    Is there AI transparency?
    Are all data/content accessible to AI? What should be excluded for privacy reasons?
    Are there biases within the AI itself?
    https://law.asia/hong-kong-ai-data-privacy-framework/

  • Published on
    The demand for highly-skilled business and IT professionals now outpace the supply. 

    We believe that tech talent shortages most likely impact the following areas: 
    Cybersecurity: With cyber threats more sophisticated than ever, skilled cybersecurity professionals are in demand. 
    Software development: Companies need more software developers to keep up with rapid technological changes and the growing need for custom software solutions. 
    Data analysis and data science: Today’s businesses need skilled data analysts and scientists to capture, interpret, and use various data to drive growth. 
    Artificial intelligence (AI) and machine learning (ML): These are driving innovation in every field – from healthcare to finance to manufacturing – so the demand for AI and ML specialists is high. 
    Cloud computing: As more companies migrate to cloud platforms, the need for cloud computing professionals surges. 
    - Emerging technologies: More firms are integrating blockchain, augmented reality (AR), virtual reality (VR), and other emerging technologies into their businesses and consumer products, increasing the need for experts in these fields. 
    Tech support and IT services: As technology takes center stage in nearly every industry, companies need professionals to support their tech systems. 
    Non-tech roles: The world is becoming increasingly digital, and tech touches nearly every role. The workforce at large must be more tech-savvy. 

    The tech skills gap can lead to many problems for your business. It can set you back in your plans to innovate, hinder opportunities and growth prospects, and prevent you from meeting customer needs. 

    Add the perpetual shift and evolution of technology, and each year continues to present different recruitment challenges for organisations to navigate.

    Here are key challenges which organisations face when recruiting:

    - The shortage of available talent. The demand for skilled and experienced technology professionals has never been higher and subsequently organisations are finding themselves under immense pressure to find the talent to deliver on projects. Organisations are competing for the same skills and many are turning to contractors to fill immediate skills gaps. DevOps Professionals, Cyber Security Specialists, and Data Scientists are only the beginning of a long list of critical tech skills that are in short supply. This is further compounded by very specific demands from organisations who are no longer just looking for professionals with the desired technical expertise. Added to this they now want relevant industry experience, demonstrable business acumen and good communication and interpersonal in order to help an organisation navigate future business challenges.
    - The right candidates may live elsewhere. The shortage of local tech talent means organisations are expanding their geographical search. This opens up opportunities to find highly skilled talent not just within another state or region but on a broader global scale too. Remote working is not without its challenges, but technology increasingly allows communication, collaboration, relationship building and knowledge sharing solutions.
    - Top talent wants a competitive salary & benefits. Tech professionals know they are in high demand and therefore have the upper hand in salary negotiations and selecting the right role for them. The overall package is increasingly important to top talent.  Organisations must also now sell the job and career opportunity to candidates. An organisation’s brand matters more than ever given the reach of social media and online reviews. Building a reputation as an employer of choice is therefore key. Part of this involves promoting career progression opportunities, the ability to work with cutting-edge technologies and continuous learning opportunities. Additional benefits such as flex-place or flex-time, extra superannuation or performance-based bonuses can also be the differentiating factor between candidates choosing one role over another.
    - Slow hiring processes:  In order to ensure the best talent doesn’t get snapped up by rival businesses, employers, particularly in the world of tech, need to consider how they can shorten their recruitment process. For instance, candidates could undertake multiple interviews with co-workers, senior management and the HR/talent team, sit aptitude and technical tests, receive feedback and be offered a conditional role, all in just one day. We’re seeing companies already using such a scaled-down recruitment process for certain positions and this approach brings advantages to both the employer and the candidate. 
    - Today’s requirements could change tomorrow. Given the rapid rate of technical innovation, it is difficult to predict what kind of disruption organisations might face next. Employers are therefore recruiting tech talent who not only fulfil a specific need of today but are futureproofed to stay relevant in future.  This means looking at how a candidate’s skills have changed over time to establish their level of adaptability and willingness to continuously upskill.

    Attracting and retaining top tech talent will remain a challenge given the current supply and demand ratio, but employers that develop and adjust their recruitment practices accordingly will secure strong candidates in our evolving digital landscape.
  • Published on
    According to a 2024 Dexian survey, employers rely too much on technology and AI when it comes to hiring.  It found that 72% of workers feel this way.
    Workers weren’t big on employers using AI to review resumes and applications. Only 24% believe that AI should be used for this purpose.

    what do you think?  Especially in evaluating talent from diverse communities and various counties in Asia, recruiters who depend on AI and keywords might fail to select the right candidate, whose CV has fallen through the cracks.
  • Published on
    Image description





    ​The demand for highly-skilled business and IT professionals now outpace the supply. 

    We believe that tech talent shortages most likely impact the following areas: 
    - Cybersecurity: With cyber threats more sophisticated than ever, skilled cybersecurity professionals are in demand. 
    - Software development: Companies need more software developers to keep up with rapid technological changes and the growing need for custom software solutions. 
    - Data analysis and data science: Today’s businesses need skilled data analysts and scientists to capture, interpret, and use various data to drive growth. 
    - Artificial intelligence (AI) and machine learning (ML): These are driving innovation in every field – from healthcare to finance to manufacturing – so the demand for AI and ML specialists is high. 
    - Cloud computing: As more companies migrate to cloud platforms, the need for cloud computing professionals surges. 
    - Emerging technologies: More firms are integrating blockchain, augmented reality (AR), virtual reality (VR), and other emerging technologies into their businesses and consumer products, increasing the need for experts in these fields. 
    - Tech support and IT services: As technology takes center stage in nearly every industry, companies need professionals to support their tech systems. 
    - Non-tech roles: The world is becoming increasingly digital, and tech touches nearly every role. The workforce at large must be more tech-savvy. 

    The tech skills gap can lead to many problems for your business. It can set you back in your plans to innovate, hinder opportunities and growth prospects, and prevent you from meeting customer needs. 

    Add the perpetual shift and evolution of technology, and each year continues to present different recruitment challenges for organisations to navigate.

    Here are key challenges which organisations face when recruiting:

    - The shortage of available talent. The demand for skilled and experienced technology professionals has never been higher and subsequently organisations are finding themselves under immense pressure to find the talent to deliver on projects. Organisations are competing for the same skills and many are turning to contractors to fill immediate skills gaps. DevOps Professionals, Cyber Security Specialists, and Data Scientists are only the beginning of a long list of critical tech skills that are in short supply. This is further compounded by very specific demands from organisations who are no longer just looking for professionals with the desired technical expertise. Added to this they now want relevant industry experience, demonstrable business acumen and good communication and interpersonal in order to help an organisation navigate future business challenges.
    - The right candidates may live elsewhere. The shortage of local tech talent means organisations are expanding their geographical search. This opens up opportunities to find highly skilled talent not just within another state or region but on a broader global scale too. Remote working is not without its challenges, but technology increasingly allows communication, collaboration, relationship building and knowledge sharing solutions.
    - Top talent wants a competitive salary & benefits. Tech professionals know they are in high demand and therefore have the upper hand in salary negotiations and selecting the right role for them. The overall package is increasingly important to top talent.  Organisations must also now sell the job and career opportunity to candidates. An organisation’s brand matters more than ever given the reach of social media and online reviews. Building a reputation as an employer of choice is therefore key. Part of this involves promoting career progression opportunities, the ability to work with cutting-edge technologies and continuous learning opportunities. Additional benefits such as flex-place or flex-time, extra superannuation or performance-based bonuses can also be the differentiating factor between candidates choosing one role over another.
    - Slow hiring processes:  In order to ensure the best talent doesn’t get snapped up by rival businesses, employers, particularly in the world of tech, need to consider how they can shorten their recruitment process. For instance, candidates could undertake multiple interviews with co-workers, senior management and the HR/talent team, sit aptitude and technical tests, receive feedback and be offered a conditional role, all in just one day. We’re seeing companies already using such a scaled-down recruitment process for certain positions and this approach brings advantages to both the employer and the candidate. 
    - Today’s requirements could change tomorrow. Given the rapid rate of technical innovation, it is difficult to predict what kind of disruption organisations might face next. Employers are therefore recruiting tech talent who not only fulfil a specific need of today but are futureproofed to stay relevant in future.  This means looking at how a candidate’s skills have changed over time to establish their level of adaptability and willingness to continuously upskill.

    Attracting and retaining top tech talent will remain a challenge given the current supply and demand ratio, but employers that develop and adjust their recruitment practices accordingly will secure strong candidates in our evolving digital landscape.