Homeserve USA

Matthew Mudry

Security Risk Authority

Matthew Mudry, CISO at HomeServe USA, is an information security and technology expert with over two decades of experience. He is responsible for upholding the organization's confidentiality, integrity and system availability. He also ensures PCI and SOX compliance, improves security posture and integrates newly acquired entities into the company's network.

Before joining Homeserve, he held important positions in security departments like Area VP at CareCentrix and VP at Castleton Commodities International. During these roles, he implemented advanced technologies and procedures to maintain secure environments and led a team of skilled architects and engineers. His professional information security and cybersecurity certifications validate his deep understanding and proficiency. Mudry is well-known for his strategic leadership, comprehensive knowledge and expertise in managing security and infrastructure for global and U.S.-based organizations.

Synchronizing Responsibilities with Business Goals

My daily responsibilities cover many tasks that help us achieve our business goals. This includes handling essential issues, participating in conference calls and creating effective solutions. I regularly assess potential security threats and monitor our organization's internal and external risks. I also maintain complete visibility over our applications, systems and cloud-based solutions. Tracking existing vulnerabilities and implementing appropriate mitigation measures to safeguard the business interests are also within my scope.

My role extends to proposing a budget that doesn't compromise the organization's security needs. I also develop multi-year roadmaps aligned with business goals and establish metrics to measure security effectiveness. Additionally, I provide leadership with insightful trend analyses without overwhelming them with excessive data.

Patching Security Loopholes

Businesses that implement software solutions without passing security checks can face significant threats. The lack of security visibility exposes them to unforeseen risks.  It is necessary to ensure all the software deployments are under the security radar and leverage monitoring tools to track down unauthorized installations.

“Keep a sharp eye on business environments and act quickly to address security threats, ensuring smooth operations with minimal interruptions.”

Understanding and analyzing the threat landscape of crucial vendors is essential for maintaining business security. Since third-party solutions often have varying security measures, businesses must implement the right processes, controls and procedures to mitigate potential disruptions. Ensuring that vendors implement appropriate preventive measures can help reduce third-party vendor risks.

Steering Technological Advancements

Our strategic foresight in enhancing business capabilities has streamlined the software development life cycle. We provide developers with tools to detect code vulnerabilities, facilitating dynamic code scanning. This enables us to refine bugs in the software development process and ensure secure code before production.

We have set up a two-layer email scanning system with banners and phishing training programs to ensure complete security in all our systems. We have also implemented an access review process to restrict control access and reduce the risk of overprovisioning. These technological advancements have been very effective and greatly benefited the organization.

Developments in Cloud Security

The security landscape is experiencing a significant change in the cloud. Initially, businesses considered cloud migration as a way to save costs. The focus has shifted to improving security and transferring risk to cloud providers, even though companies still have significant security responsibilities. A current trend is that organizations increasingly use private versions of public clouds like AWS, Azure or GCP for their agility and scalability. This allows them to quickly allocate resources and adjust based on changing business needs. Though there are complexities involved, the drive for efficiency and security benefits through cloud adoption is set to persist, driving industry advancements.

Responding Quickly to Security Threats

Remember to maintain complete visibility across all assets, applications and subcontractors to prevent potential issues. Thoroughly vet subcontractors to avoid unintentional outages that may impact your business operations. Additionally, ensure you have a skilled workforce and use in-house security expertise through contracts to address evolving threats. Implement regular training programs to educate personnel about threat landscapes, empowering them to effectively respond to emerging challenges.

A crucial piece of advice for companies is to keep a sharp eye on business environments and act quickly to address security threats, ensuring smooth operations with minimal interruptions. This enhances the chances of maintaining operational stability and minimizes the risk of extended outages or substantial data exfiltration, as adversaries are persistent. These measures form a proactive defense strategy that effectively tackles the complexities of modern cybersecurity threats.