The world was transforming digitally prior to the pandemic. Companies, for example, were already migrating to the cloud, with cost reduction and flexibility key drivers. 

Banks and insurers were also building their digital muscles, to reduce costs and meet demands of today’s tech-savvy consumers who want to conduct transactions at any time, from any location.

COVID-19 came along and turbo-boosted things. Operations and processes have been digitized apace, helping support business continuity and maintain client satisfaction. 

But with more traffic flowing along the digital highway and more people working remotely, the risk of cybercrime has increased.

Interpol says an assessment of the impact of COVID-19 on cybercrime has shown “a significant target shift from individuals and small businesses to major corporations, governments and critical infrastructure.”

The organization’s secretary general says: “Cybercriminals are developing and boosting their attacks at an alarming pace, exploiting the fear and uncertainty caused by the unstable social and economic situation created by COVID-19.”

Against this backdrop, and to get a regional perspective, BNamericas spoke…

Read More…

If you are the CISO of a mid-sized enterprise, end that zoom call and take a step back.

You probably spent 60+ hrs in Zoom meetings this week.

Your team has been working really hard over the last few months dealing with the change to a work-from-home workforce. Lots of sweat (and hopefully no blood). But, you are still 1 click away from a major breach, and your company’s attack surface continues to grow.

If reading this makes you uncomfortable, perhaps it is time to reserve some team cycles to “changing the business” as opposed to “running the business.” This is the only way you will make progress on that strategic infosec roadmap you promised your board and senior management earlier this year.

Getting Started

Getting started is pretty straightforward: you need to invest in continuous cybersecurity visibility and risk-based analytics:

1. Hire (or re-purpose) one person on your team to become your “chief data officer”
2. Deploy a tool like Balbix
3. Create a map between network/endpoint vulnerabilities and risk owners
4. Use the data-driven risk-based prioritization across all aspects of your security program: vulnerability management, protective tools, incidence response, and your…

Read More…