| | NOVEMBER - 2018ENTERPRISE SECURITY8ybersecurity is an IT voice/data network vertical that keeps some CIO's awake at night. The history of the office of the CIO has evolved over time. Early on, the CIO ran IT and simply managed the hardware platforms, computers, firewalls, threat management gateways antivirus product(s) and the corporate software of the organization. I myself in the early 1990's was guilty of thinking that data security was considered an ancillary part of the business. As IT advanced to become literally the veins of an organization, some of the traditional CIO duties have been migrated to other titles such as the CTO/CISO and in some instances the CTO gets to manage the duties of Cybersecurity. What I have seen as a CIO/CTO and now as a C-Suite consultant is that in the mid-cap and small-cap organizations, the job of Cybersecurity is presently addressed as an "additional duty" shared amongst groups or individuals within the IT organization. I have even seen some large-cap organizations treating Cybersecurity as an "additional duty" or relinquishing it to a consulting firm. In my opinion when it comes to cyber risk, you can never outsource the responsibility.Today, the network administrators check their firewall logs periodically and conduct penetration tests on an ongoing basis. The web administrators review access from foreign countries and attempts at denial of service "DoS." Software is available to alert IT to potential hacks and DoS. In this present day, the digital footprint of businesses and individuals has expanded to the point where any interruption of computing from a network, server or even an individual's laptop, can cost time and money. The mobile workforce is a growing trend and their computers are constantly joining unsanitized Wi-Fi networks, which can introduce spy where and Trojans onto the corporate network once reattached. The reputation of the corporate IT department and the company in the press may be jeopardized when an event is publicized.In 2016 Hollywood Presbyterian Hospital paid $17,000 in ransom to regain access to files locked by ransomware. We saw $81 million fraudulent transfer from Bangladesh Bank, which opened up inquiries into authentication vulnerabilities in the SWIFT financial messaging service provider, which may have opened up 11 other banks to similar attacks. Take for example the Ukraine attack where a denial of service The Job of Cybersecurity is Presently Addressed as an "Additional Duty"By Paul Garrin, CIO Partner, Tatum, A Randstad CompanyIN MY OPINIONCPaul Garrin
< Page 7 | Page 9 >