SecureWorld News

FEBRUARY 26, 2024

He has been a first-hired CISO at five different companies. He is the father of five children and gives talks on helping families work through social media and technology challenges. A : When I was with Bright Horizons, many top-tier clients demanded InfoSec competence. A : Moving the reporting line to risk (GC/CLO); using AI.

Cybersecurity 88

Cybersecurity CISO InfoSec Data privacy 88

SecureWorld News

DECEMBER 11, 2023

We covered the new rules on July 31, with some thoughts from InfoSec leaders. Public companies will also have to share details about their "cybersecurity risk management, strategy, and governance" on an annual basis. The threat of cyber disruption is material and represents a risk to businesses.

CISO 92

CISO Risk Cybersecurity CSO 92

CyberSecurity Insiders

DECEMBER 6, 2022

Many technology workers will resign from their comfortable, high-paying jobs at larger employers. CISO shortage. CISO exodus. Chief Information Security Officers (CISOs) have a rare combination of business acumen, operational knowledge, technical insights, and legal/compliance experience.

Cybersecurity 126

Cybersecurity CISO InfoSec Technology 126

SecureWorld News

JUNE 13, 2023

It was fitting that the opening keynote panel for SecureWorld Chicago on June 8th was titled " Making the Cybersecurity Music: Navigating Challenges and Opportunities in Today's InfoSec Landscape. Buerger recently joined Kraft Heinz as its Business Information Security Officer after serving as CISO at a smaller company.

Cybersecurity 84

Cybersecurity CISO InfoSec Risk 84

SecureWorld News

JANUARY 11, 2024

Working as CISO, DeSouza's areas of expertise include strategic planning, risk management, identity management, cloud computing, and privacy. While it fosters innovation, automation, and productivity, it simultaneously introduces significant cybersecurity and privacy risks. Zero Trust has come of age.

Cybersecurity 97

Cybersecurity CISO Cyber threats Risk 97

CyberSecurity Insiders

FEBRUARY 1, 2022

BOSTON–( BUSINESS WIRE )– CyberSaint , the developer of the leading platform delivering cyber risk automation, today announced that the company is seeking speaker submissions for its virtual STRONGER conference, set to occur September 13th-15th 2022. Conference Tracks: Frameworks, Security, & Risk. InfoSec 360.

Digital transformation 74

Digital transformation InfoSec CISO Education 74

Security Boulevard

APRIL 29, 2021

Tatu Ylönen, SSH founder and inventor of Secure Shell, discusses the genesis for the protocol and his keen interest in the application of technological solutions to fundamental cybersecurity challenges - check it out. The post CISO Stories Podcast: Necessity is the Mother of Security appeared first on Security Boulevard.

CISO 52

CISO Technology Cybersecurity Healthcare 52

CyberSecurity Insiders

JANUARY 20, 2022

.–( BUSINESS WIRE )– Noname Security , the API security company, today announced the formation of a Strategic Advisory Board to support the company’s global expansions and establish Noname as a trusted API security provider to CISOs around the world. Alissa Knight , CISO, recovering hacker, InfoSec influencer.

CISO 52

CISO InfoSec Technology Cybersecurity 52

SecureWorld News

AUGUST 23, 2023

This morning, Critical Start released its first ever Cyber Risk Landscape Peer Report , which explores some of the major concerns and challenges currently confronting cybersecurity leaders as they manage risk within their organizations. Here are some comments on the cyber risk landscape from cybersecurity vendor experts.

Cybersecurity 76

Cybersecurity Cyber Risk Risk Cyber Insurance 76

The Falcon's View

JANUARY 3, 2019

Consider, if you will, that fundamentally we in infosec want people to make better decisions. No matter how you look at it, DevOps is the way that business should operate, and that is - interestingly enough - exactly matched to the org management model that Laloux describes (without ever getting into technology or DevOps!).

InfoSec 40

InfoSec Engineering Digital transformation CISO 40

SecureWorld News

OCTOBER 19, 2023

Increased risk of cyberattacks The rising cost of living can lead to an increase in cybercrime, as people become more desperate to make money. I think it requires taking a step back and assessing what you can do with less," said Chris Roberts, CISO and Senior Director at Boom Supersonic. This is more critical now than it's ever been."

Cybersecurity 79

Cybersecurity CISO Education Phishing 79

SecureWorld News

SEPTEMBER 7, 2023

As for the panel presentation at SecureWorld Denver , it features Edgar Acosta, Experienced Cybersecurity Professional (former CISO at DCP Midstream ); Craig Hurter, Sr. Director of Information Security, State of Colorado Governor's Office of Information Technology; and Toby Zimmerer, Sr. Demand and Delivery Director, Optiv.

Encryption 94

Encryption Technology Risk Architecture 94

SC Magazine

JULY 13, 2021

Today’s columnist, Deborah Watson of Proofpoint, says with so much work conducted via virtual meetings, risk has increased and businesses have to pay more attention to an insider threat management program. Think of Insider Threat Management Programs (ITMPs) as a holistic focus on managing the risks that insiders pose to your corporate assets.

Risk 91

Risk InfoSec Media Technology 91

SecureWorld News

JULY 31, 2023

Cybersecurity professionals have various views on last week's news from the United States Securities and Exchange Commission (SEC) when it surprised the InfoSec community and the C-suites of corporate America. Many CISOs are already burnt out, and there is shortage of qualified CISOs globally.

CISO 88

CISO InfoSec Risk Cybersecurity 88

SecureWorld News

OCTOBER 4, 2022

Paul Rapier, Vice President of Information Technology for the Detroit Pistons, led a discussion on best practices for InfoSec teams. The panel was lead by Nick Schappacher, SVP & Deputy CISO at KeyBank, and Mary Rowley, Sr. Manager of Third-Party Risk at Raytheon Technologies.

InfoSec 95

InfoSec Cybersecurity Cryptocurrency Technology 95

Notice Bored

JULY 4, 2022

I feel more confident about the underlying generic principles of risk, compliance, conformity, obligations, accountabilities, assurance and controls though, and have the breadth of work and life experience to appreciate the next point. The mind map is a brief glimpse of the landscape, as I see it. Documented! Maintained!

Risk 72

Risk Accountability InfoSec CISO 72

SC Magazine

MAY 1, 2021

With a career spanning two decades as a technology provider to businesses and government agencies, Levine brings a strategic and pragmatic approach to building secure software and cloud services without disrupting product velocity. Since founding Cedric Leighton Associates, he has become an internationally known strategic risk expert.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

SecureWorld News

MAY 8, 2023

The six-month course is designed to teach learners how to identify common risks, threats, and vulnerabilities, as well as the techniques to mitigate them. CISOs have praised the certificate program, stating that they would regard it as a proper qualification for entry-level roles. The shortage of cybersecurity workers in the U.S.

Cybersecurity 99

Cybersecurity CISO Risk Government 99

Notice Bored

NOVEMBER 26, 2021

Globalization' is not just about establishing a widespread physical presence and brands: it's also about harnessing a widely distributed and culturally diverse workforce, harnessing technology to link, leverage and exploit the very best of the best. so, how things going with your security strategy development, dear CISO?

Risk 66

Risk Artificial Intelligence Technology InfoSec 66

Thales Cloud Protection & Licensing

NOVEMBER 5, 2020

Todd is the head of encryption products at Thales, and Rick is the principal and trusted advisor at Goldbug Technology Consulting. Too often, risk managers create plans that try to specify every possible contingency, both imaginable and fanciful. How can an InfoSec team make sure that the networks of their remote workforce are secure?

InfoSec 62

InfoSec Encryption CISO Technology 62

SecureWorld News

MAY 16, 2023

The city has a more established IT setup, including a full-time IT director, which many of the smaller towns lack, according to this Government Technology article. We use this type of model for our 'Whole of State' approach to security in North Dakota," says Michael Gregg, CISO for the State of North Dakota. This is a great approach.

Cybersecurity 80

Cybersecurity Insurance Cyber Risk CISO 80

SC Magazine

JANUARY 29, 2021

If or when more attacks are uncovered, end-user organizations will need to apply the lessons learned from SolarWinds and prepare to take swift and decisive action, infosec experts agreed in a series of interviews with SC Media. Hard reality check.

InfoSec 97

InfoSec CISO Media Software 97

CyberSecurity Insiders

DECEMBER 4, 2021

However, the engineers were optimistic about the direction they were heading and the technologies they would be creating as they relate to ML and DL. For more emerging technology resources, visit www.isaca.org/resources/emerging-technology-resources. About ISACA.

Cybersecurity 52

Cybersecurity Artificial Intelligence Education Engineering 52

Notice Bored

AUGUST 26, 2020

For example, through a YouTube session, David Koenig emphasised the governance need for resiliency, implying not just a greater appreciation of supply network risks, but better quality information and stronger control of those risks. Taking risks smartly' is cool. Aside: where do you stand on this if you are an infosec pro?

Manufacturing 52

Manufacturing Artificial Intelligence Risk IoT 52

SecureWorld News

MARCH 31, 2022

Randy is a proponent of risk-based, layered security measures that utilize both preventative and detective approaches to achieve the right solution for the organization. Randy is a CISSP and is active in the Central Missouri InfoSec community. Question: What are you most looking forward to this year at SecureWorld?

Cybersecurity 77

Cybersecurity InfoSec Authentication DDOS 77

The Falcon's View

AUGUST 6, 2018

Most guidance comes from a standpoint of inherent bias, whether it be to promote a product class, specific framework/standard, or to best align with specific technologies (legacy/traditional infrastructure, cloud, etc.). For starters, you can look at it be technology grouping: - Network. Risk Management. Risk Management.

InfoSec 40

InfoSec Risk Architecture Security Awareness 40

BH Consulting

JANUARY 16, 2024

Over the past two decades, we have witnessed unprecedented changes in technology. It found close to 100 high-risk, likely-to-be-exploited vulnerabilities that were not listed in CISA’s Known Exploited Vulnerabilities (KEV) catalogue. and 25 percent of high-risk CVEs are exploited the same day the vulnerability was disclosed.

Ransomware 69

Ransomware Penetration Testing InfoSec Cybersecurity 69

Thales Cloud Protection & Licensing

JUNE 25, 2019

This gap is putting all organisations at greater risk of attack. As organisations work to improve their ability to manage information risk, the importance of having a Chief Information Security Officer (CISO) is also being recognised. Organisations across the globe are suffering a cybersecurity workforce “gap” of around 2.9

Technology 97

Technology Small Business Cybersecurity InfoSec 97

BH Consulting

JANUARY 12, 2021

In a neat segue from our previous story, the newly published Cisco Security Outcomes Study aims to guide security leaders in their investments and help them to manage risk. The report also found that the keys to achieving successful security programs are to refresh technology proactively rather than waiting for it to break.

Data privacy 52

Data privacy InfoSec DNS CISO 52

SC Magazine

FEBRUARY 8, 2021

Ultimately, he believes “this is good for businesses as, through the insurance process, they will gain better visibility into their cyber risks and measures they can deploy to keep digital operations secure and compliant to data privacy regulations.”. billion in premium. What might that include?

Insurance 126

Insurance Cyber Insurance Cybersecurity Government 126

eSecurity Planet

DECEMBER 19, 2023

Government actions will increase: Expect more government regulations, state-sponsored cyberattacks, and increased documentation required to protect CISOs. Bottom line: Prepare now based on risk. Also consider learning about the top governance, risk, and compliance tools to identify the best one for you.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

Security Boulevard

OCTOBER 27, 2021

Ransomware has become one of the most dangerous and high-profile problems facing CIOs and CISOs worldwide. As organizations continue to gather more data than ever before, the surface area of risk, and subsequently the blast radius, will exponentially increase when an incident materializes. . Hims Pawar. Oct 27, 2021. A recent U.S.

Ransomware 59

Ransomware Backups Mobile InfoSec 59

SecureWorld News

JUNE 4, 2020

UP: Zoom gave users meeting routing controls, announced a 90-day plan to boost cybersecurity, quickly updated features so meeting hosts could reduce the risk of Zoom-bombing, and re-deployed all engineers to work on privacy and security features. Things seemed to be heading downhill quite fast. Clearly, Zoom's wild ride continues.

Encryption 70

Encryption CSO InfoSec Cybersecurity 70

SC Magazine

FEBRUARY 22, 2021

Craig Froelich, chief information security officer of Bank of America Merrill Lynch, described how cybersecurity is not just a technology risk during a 2017 annual meeting of the Securities Industry and Financial Markets Association. Craig Froelich, CISO at Bank of America. billion institution’s data and financial assets.

Banking 137

Banking Cybersecurity CISO Financial Services 137

Security Boulevard

OCTOBER 10, 2022

CEOs, Boards of Directors, CIOs, CTOs, and CISOs do not tolerate a world where the identities of their customers, workforce, or business partners (ie: human identity) are not secure because that means identity cannot be counted on to safely allow or deny access. Authorization to allow or deny access. fastsecure. In one word — fastsecure.

Digital transformation 59

Digital transformation Software Authentication InfoSec 59

Cisco Security

AUGUST 26, 2021

We constantly see new threats, and threat vectors, come and go; which puts a tremendous strain on the InfoSec teams that have to protect organizations and businesses from these threats. With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize.

Technology 113

Technology Firewall VPN Authentication 113

Duo's Security Blog

OCTOBER 6, 2023

To achieve more resilience in this heightened risk environment, stepping up zero trust maturity is essential. In other words, it’s not just about implementing MFA to verify user trust, it’s about using phishing-resistant MFA with risk-based authentication , device posture checks and other security controls.

Authentication 122

Authentication Risk Social Engineering InfoSec 122