Content by Tom Field

CISO Playbook: Dawn Cappelli on Mitigating Log4j Zero-Day

Tom Field  •  December 14, 2021

Like CISOs everywhere, Dawn Cappelli of Rockwell Automation awoke last Friday to news about the Log4j vulnerability and the risk it posed to her company, customers and partners. Here is how she approached triage, response and capturing insights to be shared with other security leaders.

COVID-19: How Does Omicron Change the Discussion?

Tom Field  •  December 13, 2021

As of Dec. 13, the U.K. is facing a "tidal wave" of infections from the COVID-19 Omicron variant, and case numbers are rising in North America as well. What do health experts know so far about the spread and severity of Omicron infections? Pandemic expert Regina Phelps shares insights.

Log4j Zero-Day: 'It's About as Serious as It Gets'

Tom Field  •  December 11, 2021

How serious is the Apache Log4j zero-day vulnerability that was announced to the world on Friday? "It's big," says Sam Curry, chief security officer at Cybereason, which has developed a "vaccine" to help. "I hate hyperbole generally," Curry says. "But it is a 10 on the criticality scale."

Profiles in Leadership: Jason Fruge

Tom Field  •  December 9, 2021

Once, in another role, Rent-A-Center CISO Jason Fruge was asked by senior management to develop a "security scorecard," but he resisted. What were his objections, and how did he address them? Fruge explains in this exclusive leadership discussion.

ISMG's King Appointed to Forbes Technology Council

Tom Field  •  December 8, 2021

Steve King, director of cybersecurity advisory services for ISMG's CyberTheory, has just been appointed a member of the Forbes Technology Council. He discusses the role, his passion for Zero Trust and new initiatives to expect from CyberTheory in 2022.

Ransomware Attackers: 'No Days Off!'

Tom Field  •  November 19, 2021

We know they are coming, and yet we are still ill-prepared. Cybereason surveyed 1,200 global cybersecurity professionals on ransomware. And while most are concerned about attacks, nearly one-quarter have no contingencies for weekends and holidays - the favored strike time. Sam Curry explains why.

Cybersecurity Leadership: Cut Through the Zero Trust Hype

Tom Field  •  November 11, 2021

Zero Trust: Is it the operational model that's going to propel us into a more secure future? Or just another marketing message to be tossed onto the pile of past campaigns? In this latest Cybersecurity Leadership panel, the top minds in the sector weigh in on the present and future of Zero Trust.

The Geography of Cryptocurrency

Tom Field  •  October 27, 2021

Where is cryptocurrency being adopted most broadly? Where are scams emerging, and where is there growing grassroots support? These are among the questions answered by the Chainalysis 2021 Global Cryptocurrency Adoption report. Researcher Kimberly Grauer shares findings and analysis.

Fraud Transformation: Balancing Business and Customer Needs

Tom Field  •  October 11, 2021

More than two-thirds of survey respondents say they take a balanced approach - business, customers and compliance - investing in fraud prevention technology. So, why do they also report customer friction among their top challenges? BioCatch's Raj Dasgupta analyzes the results of the new Fraud Transformation Survey.

Profiles in Leadership: Peter Gregory

Tom Field  •  September 30, 2021

Of all the areas under his direction - business continuity, GRC, data governance - third-party risk is the most challenging, says Peter Gregory, senior director of cyber GRC at GCI General Communications Inc. "Their breach is my breach," he says, offering mitigation advice.

Ransomware: A Problem of Excesses

Tom Field  •  September 29, 2021

You can't decrease the motivation of ransomware attackers. But you can curb their success by bolstering your own enterprise's approach to access, credentials and privileges. Morey Haber and James Maude of BeyondTrust share insights on ransomware defense.

Profiles in Leadership: Amit Basu

Tom Field  •  September 20, 2021

Like his peer CISOs, Amit Basu of International Seaways is concerned about complexity and the shifting landscape. But not just the threat landscape - he also is challenged by the shifting dynamics of business priorities and processes, as well as what "protection" in this new environment now entails.

Profiles in Leadership: Tammy Klotz

Tom Field  •  September 15, 2021

Tammy Klotz took on a new job at a new company and even in a new state in 2020 - and she was charged with both establishing herself and raising the firm's cybersecurity posture. No challenge during a global pandemic, right? Here is how she has begun to pave her way.

Profiles in Leadership: Conrad Bell

Tom Field  •  September 3, 2021

When Conrad Bell joined C Spire, the cybersecurity team numbered one - him. Today he has a thriving team. The VP and CISO explains how he built it, describes the skills he values and tells how this team is helping the telecommunications firm respond to today's daunting cybersecurity challenges.

Profiles in Leadership: Rob Hornbuckle

Tom Field  •  September 1, 2021

The threat landscape has grown, and the airlines industry in particular has been challenged. As a result, Rob Hornbuckle, CISO of Allegiant Airlines, sees his role differently: It's beyond security and about more than just the business. Where is the role going, and how does one grow with it?