It’s Time to Act: Establish a Secretary of Cybersecurity (Contributed)

/by

Government Technology | December 19, 2019

All levels of government, as well as the private sector, face growing dangers from cyberthreats. That’s why there needs to be a centralized approach to cyberpolicies before a crisis occurs.

Today, the United States is in a very similar place when it comes to cybersecurity: cyberthreats challenge our economy, our military, our national security and our infrastructure, and it’s time for the federal government to act definitively.

Read More

Tips and Guidance For Educational Entities To Ensure The Safety and Security of Their IT Data

/by

Education IT Reporter | December 17, 2019

Schools are especially prone to ransomware attacks, due to the combination of weak security protocols, out of date computer equipment, and a lack of skilled staff. Digital infections can spread among school computers much the same as biological germs spread among students. Security is unfortunately quite a lot like a treadmill – it never stops. You can never arrive at a state of solid protection, because what was good enough yesterday won’t be good enough tomorrow. New vulnerabilities are continually being found. The need to invest in basic online hygiene is constant.

Read More

Securing the Supply Chain Against Cyber Disruption

/by

Loss Prevention Magazine | December 11, 2019

Just like a physical chain, a supply chain is only as strong as its weakest link. Today’s issues are about networks of interdependence. We extract major economic benefits from modern supply chains, because each organization can focus on its core mission or specialty. This narrowing of focus is very effective, allowing each organization to be the best at whatever it does—making widgets, transporting them, or adding value by assembling parts made by other specialists. But this same narrowing of focus on just one aspect of a system means the system as a whole becomes fragile.

Read More

Forget Cybersecurity

/by

Corporate Board Member| December 6, 2019

Cyber risk is a board-level issue because a breach can crush a company’s stock price, tarnish its reputation and scare off customers and partners. A study by the Ponemon Institute revealed that a company’s stock price drops an average of 5 percent immediately after a breach is exposed. The study further found that companies lose an average of $3.92 million in revenue and a significant portion of their customers after a breach.

It’s no longer a question of whether a company will experience an attack, but when. Security is about hunkering down, while resilience means being able to operate after a breach. Here’s what directors need to know.

Read More

Get to Know NTI: Ray Rothrock

/by

Nuclear Threat Initiative – Atomic Pulse | December 2, 2019

Ray Rothrock is a member of NTI’s Board of Directors and its Science and Technology Advisory Group. He has three decades of business leadership—investing in, advising and leading many of the technology and cybersecurity companies that form the fabric of today’s networks. He is partner emeritus at Venrock, the VC arm of the Rockefeller family’s efforts, and the CEO and chairman of RedSeal, which provides critical cyber and business insights via its cyber risk modeling platform to more than 50 government agencies and hundreds of commercial enterprises.

Read More

UK IT Pros: Brexit Will Increase Skills Shortages

/by

Infosecurity Magazine | November 27, 2019

Over 90% of UK IT professionals believe Brexit will make chronic industry skills shortages even worse, according to new research from RedSeal.

The security vendor polled 502 IT professionals to gain greater insight into the skills challenges facing the country.

In total, 87% of CIOs and senior IT pros admitted that they are struggling to find cybersecurity professionals with the right expertise. In addition, 73% argued that Brexit-related uncertainty is adding to the challenge of hiring from outside the UK, and even more (95%) said that leaving the EU will only widen the current skills gap.

Read More

UK Business at Risk as Cyber Skills Gap Reaches Breaking Point

/by
  • Over a year on from Parliament’s National Security Strategy report, cybersecurity training opportunities still aren’t a priority for the Government
  • A deepening talent gap in cybersecurity has potential to cause irreparable damage to UK business
  • CIOs and senior IT employers say a looming, uncertain Brexit is presenting enormous hiring challenges
  • Businesses face a global shortage of approximately 4 million cybersecurity pros
  • A focus needs to be put on ‘skilling up’ the UK’s next generation of cyber security professionals

27th November 2019 – A new, in-depth piece of research* conducted amongst UK CIOs and senior IT professionals has revealed that the cybersecurity skills gap has reached a crisis point, putting British business on the backfoot in the ongoing war against online fraud and cybercrime. This cybersecurity industry study from digital resilience experts RedSeal, unearthed major concerns about business’ ability to develop, attract and retain personnel with the right skillset to stand up against an ever growing threat landscape.

An enormous 87 percent of CIOs and senior IT pros reported that they are struggling to find cybersecurity professionals with the expertise needed to combat serious and organised online crime. Almost three quarters (73 percent) went on to say that uncertainty around Brexit is a huge concern when it comes to hiring security professionals from outside the UK. Further, 95 percent specified that Brexit will in fact widen the current skills gap, since many IT security professionals currently within British business are from outside the UK – due to the lack of advanced cybersecurity education provided locally.

Why aren’t cybersecurity training opportunities being made a priority by the Government?

It has been just over a year since Parliament’s Joint Committee on the National Security Strategy, a cross-party group that works across both the Commons and Lords, published a report exposing the UK’s chronic lack of digital skills, even within some of its own security agencies. Published in July 2018, the report revealed that ‘although the UK has one of the most vibrant digital economies in the world, there is not currently the cyber security skills base to match, with both the Government and private sector affected by the shortage in skills. Authors of the report, titled Cyber Security Skills and the UK’s Critical National Infrastructure, voiced huge concerns around the Government’s apparent lack of urgency in addressing the cybersecurity skills gap in relation to Critical National Infrastructure.

Cybercrime is a real and present problem for UK business at a time of continued uncertainty

Further questioning within the RedSeal research also demonstrated that cybercrime and its impact on UK business continues to grow, with 81 percent reporting that they have suffered a cybersecurity breach in the last 12 months. The lack of skills has also contributed to a lack of proper response planning and almost half (40 percent) of senior IT pros stating that their business doesn’t have a plan in place to respond to a security breach.

RedSeal urges the UK government to create a more robust education policy that will deliver the skills needed in the future.

Dr Mike Lloyd, CTO at RedSeal and expert in the study of the spread of malware, commented on the new research: “Across the industry, we have drained the talent pool for security professionals. There’s a global shortage of about 4 million cybersecurity pros, up from just over 3 million last year**.  The UK’s education system can help, but not quickly – professionals agree that it takes about 10 years of real-world experience to develop the skills needed to combat today’s threats, so we’re facing a sustained drought for talent. Automation can help but cannot replace human intuition and insight. We have to build hybrid teams, combining computers for all the drudge work so that the few human analysts can focus on the security tasks that matter.”

Professor Peter Komisarczuk, Head of Department Information Security at Royal Holloway University of London, commented: “Further and higher education in cybersecurity needs continuing support in order to keep pace with the ever changing threat landscape that UK business is facing right now. There is a shortage of professionals with cyber security skills in the UK which means that engaging young people and mid-career changers in developing skills and knowledge through high level technical and computing education is more important than ever before.”

He continued: “There are significant career opportunities in cybersecurity – the average annual salary for jobs in cybersecurity is £72,500 and we are seeing our graduates getting significantly more that the average graduate salary of £23,000 on leaving with their degree. Moreover, the potential to contribute to economic growth is huge, as well as support UK business against a very real cyber threat.”

He finished: “There are some great schemes encouraging younger people to pursue a career in Information Security such as CyberFirst which provides excellent opportunities for 11-17 year olds to develop skills and knowledge as well as a bursary scheme for undergraduate students.”

—

*An online survey was conducted by Atomik Research on behalf of RedSeal among 502 IT professionals from the UK. The research fieldwork took place on 19th-27th June 2019. Atomik Research is an independent creative market research agency that employs MRS-certified researchers and abides to MRS code.

**According to the latest annual workforce study by (ISC)²

The smart tech threat to CEOs

/by

TechRadar | November 7, 2019

The cybersecurity industry talks a lot about the importance of “board-level buy-in” for projects and a security-by-design culture led from the “top down”. What does that actually mean? It means CEOs and senior managers who “get” security: leaders who know that security done right can be a competitive differentiator and growth driver, not a block on innovation.

The reality is that most still do not.

Read More

Book Review: Digital Resilience, by Ray Rothrock

/by

Tag Cyber | November 1, 2019

By Edward Amoroso

There was a time in America, decades ago, when one would feel obliged to possess a good working knowledge of science and technology to be considered a well-rounded adult. This is how physicists like Einstein became mainstream celebrities, attending film openings with Charlie Chaplin, and being hailed for scientific contributions. Years later, NASA engineers were treated accordingly, especially by young people hoping to someday design rockets.

Read More