EY - Make cyber risk a priority before an attack

EY Mining & Metals

Make cyber risk a priority before an attack

  • Share


Cyber threats are evolving and escalating at an especially alarming rate for asset-intensive industries such as mining and metals. One of the catalysts is the increased connectivity between IT and less-mature OT environments, which is widening the cyber-attack surface.

Cyber risk can be the downfall of a mining and metals organization’s productivity gains and digital aspirations. And the cost of these attacks is climbing steeply. By 2021, the global cost of cybersecurity breaches is expected to reach US$6 trillion, double the total for 2015.

Join our panel of EY mining professionals for an interactive discussion including:

  • What the cyber threat landscape looks like
  • The challenges faced by organizations in the sector
  • What organizations can do to get ahead of the cyber threats
  • A robust cyber threat approach



EY - Paul Mitchell

Paul Mitchell

Ernst & Young

Paul Mitchell is the EY Global Advisory Mining & Metals Leader, based in the Ernst & Young Asia Pacific Advisory practice.

Paul has over 20 years’ experience in providing advisory services to business and government. He’s an experienced facilitator with broad financial and operational skills, and undertaken numerous complex transformations for EY’s largest clients.

Mining experience include the management of the integration of mines, broad transformation projects and post-merger integration. Recently, he has been the program director for the Productivity project for a large mining company, and managed working capital improvement projects for two large international mining companies. He’s also lead offshoring and outsourcing projects for clients, across finance, IT & core business functions, as well as designed and implemented Shared Services for large multinational companies.

Paul earned his Bachelor of Commerce from the University of Western Australia, is a member of the Australian Institute of Chartered Accountants.


EY - Michael Rundus

Michael Rundus

Ernst & Young

Michael Rundus is the EY Global Mining & Metals Cybersecurity Leader, based in the Oceania Advisory practice.

Michael has over 22 years’ experience in providing advisory services to mining and energy companies. He is an accomplished problem solver with a highly consultative approach.

Recently, Michael has led a number of cybersecurity engagements for large mining companies identifying their crown jewels, assessing their cyber risk across operations and performing penetration testing of both IT and OT systems. He has also been involved in a number of robotic process automation engagements in the mining sector.

Michael has a Bachelor of Business (Hons) from Edith Cowan University and is a member of the Australian Institute of Chartered Accountants.

EY - Clement Soh

Clement Soh

Ernst & Young

Clement Soh is a Director within EY’s Asia Pacific Advisory practice. He is the Mining & Metals Oceania Cyber Leader.

Clement has over 16 years’ experience in cyber, program risk management, technology enablement and risk management. He is highly versatile and has experience with the Mining, Energy, Telecommunications and Education sectors.

Mining experience include leading operational technology cyber security improvement programs, cyber threat assessments for autonomous trucks, cyber crisis simulations, and various ‘red teaming’ cyber penetration exercises for large and global mining companies. In addition, he led the global IT Assurance program for a global mining company for over three years which entailed oversight, coordination and delivery of technical IT security reviews, IT process effectiveness, and program risk reviews for integrated operation centre, SAP, production tracking, and sales & marketing strategic initiatives.

Clement has a Bachelor of Engineering (EE) with Honours and a Bachelor of Commerce (Finance) from the University of Western Australia.

EY - Iain Burnet

Iain Burnet

Ernst & Young

Iain has 23 years’ experience across a breadth of business and technology risk, internal audit and improvement service areas. Iain’s significant involvement in the Mining & Metals sector over the last 15 years has provided him a depth of insight across the industry’s value chain from exploration, development and construction to asset operations, logistics and support services such as global ERP, technology and shared services. Iain is EY’s Global Client Service Partner (GCSP) for a major mining company and is responsible for all services provided to the group around the world. He was heavily involved in the global co-sourced internal audit for almost 10 years and was the EY global lead for three years. His engagements have included business and operational reviews covering major capital projects, operational projects, technology implementation projects (SAP), contractor management, end-to-end procure to pay and sales and marketing. Iain has also led improvement projects such as the global working capital improvement program.