Toll Group: AI-era data security focuses on third-party risk

Toll Group is changing its data security approach, moving beyond just technology. They are now embedding security requirements into vendor selection, contract management, and third-party risk governance. What's interesting is their global data protection lead, Vasant Prabhu, states traditional firewalls and access controls are no longer enough for a global supply chain. He says the most dangerous door is often one you didn't even know existed. Toll Group operates in over 50 countries, and logistics is a high-risk sector. They have made security requirements a condition of doing business. Prabhu emphasizes that managing security only after a risk materializes is too late. The company is dealing with customer data, vendor records, and operational information moving across borders and third-party systems. Toll Group's assets are designated as critical infrastructure, meaning a security failure could have a national impact. They have strengthened vendor due diligence, tightened third-party access controls, and increased scrutiny on how AI technologies interact with their data. This proactive approach is a direct result of a significant cyberattack they experienced in 2020. This shift highlights the growing importance of securing the entire supply chain, not just internal systems.