Tag: Chief Information Security Officer (CISO)

Who knew that cybersecurity was not about sticking a firewall on the edges of the corporate network? Well it is, but if that’s all you’re doing, you’re already in trouble. At the recent Amazon Web Services (AWS) annual cybersecurity conference, re:Inforce, held in Philadelphia this year, a constant refrain was that cybersecurity is as much about corporate culture as it is about technology.

It is a common belief that 'data is the new oil', and Information Technology (IT) supports almost every modern-day transaction, from the delivery of electricity and water to banking, shopping, manufacturing, and correspondence. The confidentiality, integrity, authenticity, and accessibility of information that enable these operations must be ensured to avoid the failure of related and unrelated information, devices, and activities. These failures expose businesses and individuals to the risk of reputation, income, assets, and the very endurance of the business or organisation and as a going concern. As a result, like sustainability, cybersecurity is now a critically important 'C-suite' issue.

Many organisations in today's digital landscape rely heavily on third-party vendors who help carry out delegated operations. A third-party vendor could be a company or entity that provides certain services to your business.

Information has undoubtedly become one of the most valuable assets for organisations, and whose dependence on it is constantly rising. At the same time, the frequency, sophistication and ferocity of cyberattacks are also increasing, posing a significant threat to business environments.

Cyber and information technology security governance refers to the system by which an organisation directs and controls IT security and, to a large extent, involves decision making to mitigate cyber risks. By definition, this implies that cyber governance determines who is authorised to make decisions regarding the adoption of frameworks and the design and implementation of effective controls, which to a significant extent rely on continuous human involvement.

Recent global events, specifically the global COVID-19 pandemic, have caused widespread business disruption and transformation, forcing businesses to adapt to new ways of working in an extremely short period.

As any business grows, data sharing increases in both volume and frequency. Every one of these digital relationships presents an expanding set of cyber risks. Cyber security has become a major priority for every organisation. The right controls and procedures must be put in place to detect potential attacks and protect against them. However, with the ever increasing risk of a cyber-attack businesses are finding it increasingly difficult to keep up with the rapidly evolving cyber threats?