CISO

Minimizing CISO personal liability through end of year budgeting

Posted on by Admin
Minimizing CISO personal liability through end of year budgeting

As the end of 2024 quickly approaches and companies are scrambling to finalize fiscal year 2025 budgets, Chief Information Security Officers (CISOs) are tasked with balancing ever increasing cyber risks with limited budgets, all while facing potentially crippling personal liability if they fail to strike the right balance and a breach occurs. To minimize the potential risks to their organizations and their own personal well-being, there are a number of steps CISOs should consider taking…

Read More

Cybersecurity News Round-Up 2024: Top 10 Biggest Stories

Posted on by Admin
Cybersecurity News Round-Up 2024: Top 10 Biggest Stories

This year has not been quiet for the cybersecurity field. We have seen record-breaking data breaches, huge ransomware payouts, and illuminating studies about the impact of the increasingly complex and ever-evolving threat landscape. As we approach the new year, TechRepublic revisits the biggest cybersecurity stories of 2024. 1.  Midnight Blizzard’s attack on Microsoft In January, Microsoft disclosed that it had been a victim of a nation-state-backed attack beginning in November 2023. The Russian threat actor…

Read More

CISA, FBI Release Guidance for Improving Cybersecurity

Posted on by Admin
CISA, FBI Release Guidance for Improving Cybersecurity

On Dec. 3, the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, and international partners issued guidance on strengthening systems against intrusions by threat actors targeting telecommunications. The guidance was informed by recent breaches affiliated with the Chinese government. The recommendations come weeks after the FBI and CISA identified that China-affiliated threat actors had “compromised networks at multiple telecommunications companies.” Initially, the breaches were believed to target specific individuals in government or political…

Read More

How to Present Cybersecurity in a Way That Resonates

Posted on by Admin
How to Present Cybersecurity in a Way That Resonates

Securing buy-in for cybersecurity projects in business requires a fine balance. If the rest of the C-suite believes the company is already secure, the CISO may struggle to get a budget for projects. Simultaneously, getting funding for preventative measures can be difficult to communicate. At the ISC2 Security Congress held in Las Vegas from Oct. 12-16, Safe-U founder and CEO Jorge Litvin shared strategies for framing security discussions in ways that resonate with executives. Why…

Read More

The top challenges CISOs face in identity security

Posted on by Admin
The top challenges CISOs face in identity security

Identity-based challenges are becoming increasingly complex. As organizations seek to mitigate identity-based risks, CISOs may confront notable obstacles.  Here, we talk to Alex Bovee, Co-Founder and CEO of ConductorOne, about the difficulties CISOs are facing with the modern identity security landscape.  Security magazine: Tell us about your title and background. Bovee: I’m the Co-Founder and CEO of ConductorOne, which provides a modern identity governance platform. My career has been largely focused on building products at the…

Read More

Where do CISOs stand in an era cyberattacks and intense scrutiny?

Posted on by Admin
Where do CISOs stand in an era cyberattacks and intense scrutiny?

Cybersecurity has no doubt entered the national dialogue when it comes to economic or even national security issues. By nature, cyber is a deeply technical endeavor, but organizational culture surrounding security has become as important as the tech wizardry itself. This is evidenced by Microsoft’s recent testimony before the House Homeland Security Committee around alleged security lapses (for instance, the tech giant was mired in the headline-grabbing SolarWinds breach that touched government agencies). It has…

Read More

Balancing Risk and Innovation – A CISO Perspective

Posted on by Admin
Balancing Risk and Innovation – A CISO Perspective

In this episode of The Security Podcasts featuring Jill Knesek, CISO of Blackline, and former FBI Special Agent in the Cyber Crime Squad, we talk about balancing risk & innovation from a CISO’s perspective. “The message I like to give is we can be both innovative and secure.,” Knesek says. “They’re not mutually exclusive, and they shouldn’t be. By shifting left and embedding strong security practices and controls earlier into our development lifecycle, we can…

Read More

New research shows 12% of CISOs faced budget declines in 2024

Posted on by Admin
New research shows 12% of CISOs faced budget declines in 2024

Research from IANS Research and Artico Search reveals the impact the global economy is having on security budgets. The research includes a survey of more than 750 CISOs from April to August 2024.  The average budget growth has increased from 6% in 2023 to 8% in 2024. However, this rise is smaller than in previous years, as 2021 saw a growth rate of 16% and 2022 saw one of 17%. Meanwhile, almost two-thirds of CISOs report a higher…

Read More

Tesserent Offers Mental Health Tips for Australian CISOs

Posted on by Admin
Tesserent Offers Mental Health Tips for Australian CISOs

Cyber professionals in the APAC region are no strangers to work-related stress. Reports have indicated that most cyber workers in the region experience burnout, with as many as 9 in 10 employees impacted on some level. Causes of burnout include a lack of resources and alert fatigue, resulting in employee anxiety or disengagement. Senior executives at Australian cybersecurity firm Tesserent have offered some advice for CISOs who want to preserve their mental health in the…

Read More

How organizations can save CISOs amidst increasing federal regulations

Posted on by Admin
How organizations can save CISOs amidst increasing federal regulations

In an effort to bolster data security and privacy practices amidst increasing cyberattacks, new data breach reporting rules enforced by the Federal Trade Commission (FTC) and Securities and Exchange Commission (SEC) have taken effect for various organizations and financial institutions. Since May 13, 2024, non-banking financial institutions (including mortgage brokers, payday lenders and tax preparation firms) must report data breaches to the FTC within 30 days of discovery. This new mandate, which is part of…

Read More
1 2 3 4