Thursday, February 23, 2017

Cyber Security & Risk Mgmt Summit by Technology Executives Club

First timer and was a good day's conference (like the Lake Forrest Grad. location) - well represented by companies and leaders in the area...and good hand full of vendors too

Key cyber topics mentioned:
  • Top priorities: End users being phished and the aftermath, yes - Ransomware, Don't know what we don't know (visibility); and 3rd party (vendors requiring remote connection into company and there ability to maintain appropriate security on there own end)
  • Vendor identified common thread/threats include: APT, Nation-state and of course phishing clicks
  • ISACA top 3 threats: Social Engineering 52%, Insider threat 40% and Advance Persistent Threat 39%Action items: Look for anomalous not just malicious,
  • Talent gap another theme in the industry - since automation can only go so far
  • Incidents will happen, just don't let the same happen twice - investigate / learn from experience 
  • Risk management needs to be integrated and Privacy is required but not necessary the same agenda as Security
  • Remember security is behavior and economics

2 comments:

  1. What are some takeaway for people without an IT focus?

    ReplyDelete
  2. Where's the March update?

    ReplyDelete