The Security Strategist

The aftermath of a cyber attack for a business can be devastating and may have significant short-term and long-term consequences. 

The extent of the impact will depend on the nature and severity of the attack, the level of preparedness of the business, and how quickly they can respond and recover.

But how can you recover from these cyber attacks? How are critical infrastructures being targeted? And what further complications can arise when systems are downed for extended periods of time?

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Alex Yevtushenko, CEO at Salvador Technologies, to discuss:

• The aftermath of a cyber attack
• How critical infrastructures are being targeted
• Consequences of long downtimes

A recent Gartner report stated that companies that implement CTEM (continuous threat exposure management) will be three times less likely to suffer from a breach. 

With the objective of CTEM being the achievement of a consistent, actionable security posture, why should you bring that into your brand protection strategy? Should a proactive approach be prioritised over a reactive approach? And how can CISOs implement this while ensuring they’re compliant with incoming regulations such as DORA?

• Continuous threat exposure management 
• How CISOs should approach compliance 
• Proactive approach vs reactive approach

From ruthlessly targeting BFSIs to leaking the personal data of cancer patients, the horror stories that surround serious cybercrime are worse than ever before. 

Getting one step ahead of cyber attacks and becoming proactive with your cybersecurity is essential to keeping your company secure, and one way to do that is adopting a deny-by-default philosophy. 

But what is deny-by-default? What are CISOs worrying about most in this current landscape? And what lessons can be learned from assuming your enterprise has already been breached?

• Zero Trust and a deny-by-default philosophy
• Assuming that the attackers are already in
• Dangers of data exfiltration

Earlier this year, Gartner predicted that companies that implement Continuous Threat Exposure Management, or CTEM, will have 3x fewer incidents year-on-year. 

Visibility is critical when it comes to cybersecurity, and a programmatic approach to that visibility should include CTEM in some capacity, according to SecurityIntelligence.

But how does CTEM actually work? What problems does it solve? And how can it be seamlessly brought into to an enterprise to helps CISOs prioritise initiatives and measure progress?

• Continuous threat exposure management
• Benchmarking an organisation's security posture 
• Solving the challenges that most CISOs face

In today's interconnected world, where technology plays a vital role in our personal and professional lives, the effectiveness of cybersecurity measures has become paramount and the role of Chief Information Security Officer is under more scrutiny than ever before.  

And with many CISOs dealing with fragmented vendors, lack of talent to pace with a dynamic environment and even an inability to be seen as a driver of value to the business, how can a cybersecurity strategy be scaled into something which actively promotes the survival and success of your business?

• What makes an effective cybersecurity program
• Accelerating risk landscapes requiring prioritisation
• A good operating model for cybersecurity

Data exfiltration has become a serious issue for companies in today’s world.

The unauthorised removal and theft of company data are becoming more commonplace as cybercriminals become more sophisticated in their attacks. 

A good Data Loss Prevention, or DLP, strategy used to be enough to help protect the enterprise from malicious attacks, but has this changed? Is DLP dead?

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Darren Williams, CEO and Founder at Blackfog, as they discuss:

• The current state of cybersecurity
• How companies are struggling to protect their data
• Differences between anti data exfiltration and DLP

Physical identity plays a crucial role in security. Through biometric authentication technology like facial recognition and iris reading to fingerprint reading, physical identity is used to verify who a person is. 

The use of physical identity is becoming more and more prevalent in public places, particularly in healthcare where patient safety and security is paramount. 

In this episode of the EM60 Podcast, Analyst Dr. Eric Cole speaks to Clete Bordeaux, Director of Healthcare Business Development at HID Global and Michael Ramstack, System Senior Director of Security from Essentia Health, about:

• Security challenges in the healthcare industry
• Physical identity priorities
• Why visitor management works best as part of a multi-pronged approach

Effectively managing third-party risk has become crucial for companies.

Not only is it key to helping protect a company's reputation, which is crucial for maintaining customer trust and loyalty, but many industries are subject to regulatory requirements that mandate compliance with specific standards and guidelines, and companies must ensure that their third-party vendors also comply with these regulations to avoid legal and financial penalties. 

Not only this, but poor third-party management can result in financial losses due to fraud and breaches, not to mention the delaying of core operations. 

• Managing third-party risk
• Is privacy the biggest factor?
• Emerging trends and technologies

Small and medium-sized enterprises (SMEs) face numerous challenges when it comes to cybersecurity. 

One of the most significant challenges is the lack of resources, including budget and personnel, to invest in robust cybersecurity measures. This often leaves SMEs vulnerable to cyber threats, such as phishing attacks, ransomware, and data breaches. 

Additionally, SMEs may not have the expertise to effectively implement and manage cybersecurity solutions, leaving them susceptible to cyber-attacks.

This lack of attention to cybersecurity can lead to devastating consequences for SMEs, including financial losses, reputational damage, and legal liabilities.

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Matthew Warner, CTO and Co-founder at Blumira, to discuss:

• Common cybersecurity threats that SMEs face
• How these threats differ from those faced by larger companies
• Implementing effective cybersecurity measures

Supply chain attacks occur when hackers compromise a third-party vendor's software or hardware, which then infects the vendor's customers. Such attacks can be devastating, as they allow the attacker to gain access to the systems and data of many organisations.

To mitigate the risks of supply chain attacks, organisations should perform due diligence on their vendors, monitor their vendor's security practices, and implement strict access controls and network segmentation.

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Uri Dorot, Senior Product Marketing Manager at Radware, to discuss:

Supply chain attacks from the client side

Traditional WAF vs server protections vs client side protections

Deployment experiences