| | May 2019ENTERPRISE SECURITY8IN MY OPINIONHow Will Innovation Impact the Practice of Cybersecurity?here is a plethora of new and exciting tools and innovation that can be used to support your cybersecurity efforts. Some, like moving to the cloud, will require a change in thinking and posture while others, such as AI, will potentially change the way you do business in the security realm. There are, however, still some basics that you MUST do in order to be effective in defending your systems, data and business.Basic Blocking and TacklingDespite recent innovation, key elements of cybersecurity remain critical to your success. These are somewhat simple if you stop and think about it, though in practice we tend to make them more difficult than necessary in my view.1) Leadership MUST own the Issue ­ leaders up to and including the Board of Directors have to be involved and understand cyber issues in their business.2) The leadership team MUST understand risk management so that balance can be achieved between mission/business, security and privacy.3) You need to know and understand your network, and when you do, good cyber hygiene is a must ­ it's a team sport ­ see point 2 above.4) You need to have a plan for a "bad day" and you need to exercise the plan, to include senior leadership.5) You MUST leverage relationships ­ essentially we are in this together.As you contemplate how to apply innovation, these five key elements must still be part of your effort.Department of Homeland Security How does DHS the fit into your cybersecurity effort as you think thru utilization of cloud infrastructure, the potential of AI and machine to machine threat sharing? The National Cybersecurity and Communications Integration Center (NCCIC) is uniquely positioned as the Nation's Flagship Cyber Defense, Incident Response and Operational Integration center. Our mission focus areas are: · Information Exchange - Share information about cyber and communications risks to support stakeholder decisions and actions. · Incident Management - Manage cyber and communications incidents in real time to mitigate impacts and reduce risks to critical systems.· Analysis - Conduct analyses to recognize threats and vulnerabilities, identify countermeasures, and develop situational awareness.· Capacity Building - Build capacity across all levels of government and the private sector to improve the manage¬ment of cyber and communications risks.In each of these areas, we work closely with public and private partners to reduce the risk of systemic cybersecurity and communications challenges. As innovation changes the landscape, we constantly seek to understand the potential impact so that we can take advantage of new ways to be more effective and help understand the cyberscape with a view to better helping our partners defend their "stuff".Recently too, DHS created the National Risk Management Center (NRMC) in response to an increasingly complex threat environment and corresponding By John Felker, Director, National Cybersecurity and Communications Integration Center, U.S. Department of Homeland SecurityT
< Page 7 | Page 9 >