DECEMBER 2024ENTERPRISE SECURITY| | 19with the board of directors, senior leaders and business units. HOW DO YOU ENSURE THAT YOUR ORGANIZATION STAYS AHEAD OF CYBERSECURITY THREATS AND MAINTAINS A ROBUST SECURITY POSTURE?The foremost action we have taken to keep ourselves ahead of cyber threats is the enhancement of our proactive intelligence capabilities. From a capability perspective, we take a risk-based approach that seeks to identify cyber risks and prioritize the mitigation of those risks. We also partner with peers inside and outside the financial services industry to understand best practices for mitigating risks. We participate in a variety of information-sharing circles, such as the Financial Services Information Sharing and Analysis Center (FSI SAC) and the National Cyber-Forensics and Training Alliance (NCFTA). WHAT ARE THE KEY CONSIDERATIONS THAT YOU KEEP IN MIND FOR BUILDING AN EFFECTIVE INCIDENT RESPONSE PLAN? HOW DO YOU ENSURE READINESS TO RESPOND TO ANY CYBER INCIDENT?Practice makes us better every day, and this is what I incorporate when responding to any cyber incident. For instance, we regularly operate tabletop exercises with the executive leadership and key senior leaders, who in turn foster a culture of awareness, security, and responsiveness amongst our associates. We share the lessons learned and highlight emerging threats to ensure associates are trained to be on the lookout for the latest techniques used by bad actors. Additionally, we hire talented and experienced cyber experts who understand the mission and the severity of each situation and who respond to potential threats in a timely and appropriate manner. This requires proper training and a lot of practice to make things run smoothly.HOW DO YOU ENVISION THE FUTURE OF CYBERSECURITY AND WHAT ARE THE STEPS OR PRACTICES YOU THINK ORGANIZATIONS SHOULD IMBIBE TO PREPARE FOR THE UPCOMING CHALLENGES OR OPPORTUNITIES?In terms of the future of cybersecurity, we have created a team focused on cyber research and innovation. One of the team's key focus areas is on artificial intelligence (AI) and its implications for cyber security. My peers and colleagues realize that the barrier to entry has become relatively low with the advancement of AI. Collectively, we understand the need to focus on leveraging technology in the right way. As cybersecurity professionals, we continually look to leverage advancing technologies and digital tools to protect our respective organizations. Additionally, we are exploring ways to synthesize large amounts of information and to make more strategic decisions. WHAT WOULD BE YOUR PIECE OF ADVICE TO YOUR FELLOW PEERS ON HOW TO NAVIGATE THROUGH THIS CHANGING SPACE?Collaboration has become an emerging trend in navigating the technological space and in understanding cyber risks faced by other organizations. Sharing strategies and approaches for mitigating risks, collectively makes us all stronger. Every sector is vulnerable to cybersecurity threats, so communicating and collaborating with peers in other organizations is critical to combating bad actors. In addition to collaborating with peers, maintaining strong relationships with regulators and vendors also helps us stay on top of evolving cyber risks. Lastly, it's imperative to educate associates so that they are aware of the role they play in managing cyber risk. After all, securing data is not merely the responsibility of the CISO but all associates. ESTHE ESCALATION OF CYBER THREATS HAS MADE ADVANCED CYBERSECURITY PRACTICES ESSENTIAL TO SAFEGUARDING DIGITAL ASSETS FOR MODERN BUSINESSES. WE HAVE DEVELOPED PROACTIVE INTELLIGENCE CAPABILITIES TO IDENTIFY RISKS BEFORE THEY STRIKE AND DISRUPT BUSINESS OPERATIONSThis article is based on an interview between Enterprise Security Magazine and Marco Maiurano.
< Page 9 | Page 11 >