Content by Tom Field

Detecting and Mitigating Fraud Through Trust Building

Tom Field  •  May 11, 2023

Customers want to trust a brand, and that includes trusting it with protecting their digital identity. Joe Burton, Telesign CEO, advised that customers should be part of the "security journey." Explaining why you're asking for information to verify their identities "turns friction from annoying to reassuring."

The Past, Present and Future of Tech Regulation

Tom Field  •  May 9, 2023

Historically, U.S. regulators have been slow to set controls on critical infrastructure because of the technical complexity of systems in that sector, but that is changing thanks to the U.S. national cybersecurity strategy, said Glenn Gerstell of the Center for Strategic and International Studies.

Survey: Cloud Risk Growing in Financial Services

Tom Field  •  May 8, 2023

The use of cloud by financial services firms has risen from 91% to 98%, and multi-cloud for critical operations has risen dramatically, triggering greater risk and regulatory scrutiny, said Troy Leach, chief strategy officer at the Cloud Security Alliance, citing a new survey.

OT-CERT: Enabling SMBs to Address Cybersecurity Risks

Tom Field  •  May 8, 2023

With an ever-expanding threat landscape, organizations need to possess the right tools and knowledge to deal with cyberattacks. Dawn Cappelli, head of OT-CERT at Dragos, recommends training small and medium-sized businesses that are just starting their operation technology journey.

Why Humans Alone Can't Beat Cybercrime

Tom Field  •  May 7, 2023

Cybercrime has grown considerably in the last several years. The scope, velocity and variability of attacks have increased, as has the attack surface - and it's impossible for humans alone to understand, correlate, find the cause, analyze and fix it, said Bipul Sinha, co-founder and CEO of Rubrik.

Bridging the Gap Between Cyber Haves and Have-Nots

Tom Field  •  May 7, 2023

Public sector organizations often lack the resources needed to protect against nation-state attacks and espionage, while private sector entities often struggle in defending against ransomware and similar threats, said Yaniv Vardi, CEO of Claroty, who explained why more collaboration is needed.

Convergence: Emerging Tech, New Threat Vectors and Risks

Tom Field  •  May 7, 2023

The emergence and convergence of technologies - ranging from OT to AI and the shift to the cloud - are creating new threat vectors and security risks as well as opportunities, says Dave DeWalt, founder and CEO of NightDragon, who describes what keeps him up at night and why.

Addressing Security Challenges, Opportunities in M&As

Tom Field  •  May 7, 2023

Companies that grow quickly through mergers and acquisitions often face an array of unique security risk challenges - as well as opportunities - said Ash Hunt, global CISO of Apex Group Ltd., who is helping to shepherd his organization through such a transformation.

Taking a More Quantifiable Security Risk Approach

Tom Field  •  May 7, 2023

When security teams buy dozens of security products, they also get dozens of dashboards and sometimes conflicting ways to approach security, which can create its own risk, said Saket Modi, CEO of Safe Security. Risk needs to be more visible and quantifiable, he said.

Efficiency Is Key in Global Cyber Capabilities Training

Tom Field  •  May 7, 2023

A cyberwar is afoot, but not every country can prepare and protect itself. Christopher Painter discusses how he built the Global Forum on Cyber Expertise Foundation to promote cybersecurity capacity-building around the world, cut redundancy in cyber training and prepare for anticipated threats.

Cybersecurity as Civil Defense: Everyone Has a Role

Tom Field  •  May 7, 2023

Many organizations are finally improving basic cyber hygiene, but the major problem facing defenders and governments is how to achieve scale across all sizes of businesses including nonprofits around the world, said Phil Reitinger, CEO and president of Global Cyber Alliance.

Protecting the Low-Hanging ICS Fruit

Tom Field  •  May 7, 2023

OT security programs continue to be underfunded and understaffed, although rapid growth in this sector and new focus from government and organizations show hope, said Alexander Antukh, CISO of AboitizPower, and Mex Martinot, vice preisdent and global head of industrial cybersecurity, Siemens Energy.

Why Privacy Is Generative and Constantly Moving

Tom Field  •  May 7, 2023

Organizations need to look at privacy at a strategic and "almost cellular level" that is in constant motion, said Michelle Dennedy, CEO of PrivacyCode. "It's generative privacy." Dennedy said that nearly 75% of the world is governed by a GDPR-like scheme, and it's time for the U.S. to follow suit.

OT Security: Know What You've Got and Where Your Risks Are

Tom Field  •  May 7, 2023

Threat intelligence is an important component of OT security because it maps the techniques and tactics of threat actors to what they are likely to attack, and it collaborates across teams to cover potential vulnerabilities, according to CISOs Susan Koski and Sapan Talwar.

APIs Are a Massive Problem - We Just Don’t Know How Massive

Tom Field  •  May 7, 2023

APIs are delivering huge business value, but people don’t know how many APIs they have in their organization, what they do or who controls them. And that causes massive security vulnerabilities, according to CyberEdBoard panelists Chase Cunningham and Richard Bird.