The Security Strategist

The audit process is broken. CISOs and CTOs have faced a multitude of challenges under this outdated audit landscape, and the efficacy of companies are being stunted by a system that desperately needs updating.  But how can technology be leveraged to streamline or even transform that auditing process? And what does the future of infosecurity compliance look like? In this episode of the EM360...

In the world of complex supply chains, it’s not enough to secure our own data but also ensuring that third party vendors we work with have robust security. When it comes to proactively stopping threats and mitigating issues, supply chain monitoring and ensuring a secure software supply chain is crucial to keep organizations’ data safe.   In this episode of the EM360 Podcast, Analyst&nbsp...

In 2024, the conventional approach of responding to threats is dead. As cyberspace becomes more complex, interconnected, and sophisticated, companies are beginning to recognise the shift from a reactive stance to a proactive one.  This shift isn’t just a technological upgrade - it’s a fundamental change in mindset that can cause ripples throughout the business.  In this episode of the EM...

Using threat intelligence effectively in incident investigation is crucial for identifying, mitigating, and preventing cybersecurity threats.  By integrating relevant threat intelligence feeds, security teams gain insights into the tactics, techniques, and procedures employed by malicious actors. This aids in swift detection and response to potential incidents. In this episode of the EM360 Po...

Application security is a complex, wide-ranging field.  With attackers using a wide range of attacks from credential stuffing to cookie poisoning, how can you keep up with the ever-evolving landscape? In this episode of the EM360 Podcast, Analyst  Jonathan Care  speaks to  Uri Dorot , Senior Product Marketing Manager at  Radware , to discuss: Main challenges in protecting...

Doing more with less. The art of optimising your cybersecurity strategy and resources to achieve effective protection against cyber threats.  From assessing and prioritising assets to utilising open source tools, understaffed and overstretched cybersecurity teams are looking at ways to maximise what they’re able to do.  In this episode of the EM360 Podcast, Head of Content  Matt Har...

Securing Software as a Service (SaaS) applications is crucial to protect sensitive data, ensure user privacy, and maintain the overall integrity of the service. From data encryption and identity management to network security and a solid incident response plan, there are some crucial things to consider when employing SaaS as a part of your workflow.  In this episode of the EM360 Podcast, Anal...

Enabling the business to leverage data while preventing breaches are top priorities for CxOs and boards across industries.  However, data security has long relied on legacy architectures and outdated approaches that were developed to protect data on-premises.  By harnessing artificial intelligence and machine learning to automatically learn and holistically protect a company's unique dat...

No one knows how far gen AI can go in the enterprise but we know that it will be massive. Future platforms will certainly streamline and ensure efficiency, accuracy, and impact.  But there are many questions, including whether open source models perform as well as proprietary research? Will data compliance continue to be the main challenge the industry faces? What does the right to be forgott...

Zero Trust is a security concept and framework that assumes no trust, even among users and systems inside the corporate network.  Traditionally, network security models operated under the assumption that everything inside the corporate network could be trusted and that once someone gained access to the network, they could be trusted to access various resources. This is no longer viable in 202...

XDR isn’t just a fancy term or the latest trend; it represents consolidating security tools, enhancing defences against sophisticated attacks, and reducing response time to safeguard against data breaches. Starting from a solid foundation of centralized logs, organizations can use XDR as part of their cybersecurity strategy to detect breaches across many different sources of data.  If we look...

It’s officially the spooky season - but something scarier than ghosts, vampires and werewolves is striking fear into the hearts of cybersecurity leaders across the globe.  The unique challenges in the security space have been forcing industry leaders to switch up the ways they operate, specifically in the MSP space. What does it mean to be a cybersecurity leader today? How have cyber attacker...

Rapidly accelerating technology advances, the recognized value of data, and increasing data literacy are changing what it means to be "data driven."  The ability to leverage data for day-to-day activities improves decision making, and fosters better innovation, collaboration, and communication.  With deep insight into the data they have, and the confidence that their data is secure, Cyer...

Monitoring cyber risk is essential in today's interconnected landscape.  Involving continuous assessment of vulnerabilities, threat detection, and response readiness, companies should be looking at the best way to protect themselves. But is offence really the best defence? Does a proactive stance provide more of a formidable cybersecurity posture than a reactive stance? And how are the bright...

The aftermath of a cyber attack for a business can be devastating and may have significant short-term and long-term consequences.  The extent of the impact will depend on the nature and severity of the attack, the level of preparedness of the business, and how quickly they can respond and recover. But how can you recover from these cyber attacks? How are critical infrastructures being targete...

Privacy laws are legal regulations that aim to protect the privacy and personal information of individuals.  Designed to govern the collection, use, storage, and sharing of personal data by businesses, the primary objectives of privacy laws are to ensure that individuals have control over their personal information and to prevent its misuse. But how have these laws developed over time? And be...

A recent Gartner report stated that companies that implement CTEM (continuous threat exposure management) will be three times less likely to suffer from a breach.  With the objective of CTEM being the achievement of a consistent, actionable security posture, why should you bring that into your brand protection strategy? Should a proactive approach be prioritised over a reactive approach?...

From ruthlessly targeting BFSIs to leaking the personal data of cancer patients, the horror stories that surround serious cybercrime are worse than ever before.  Getting one step ahead of cyber attacks and becoming proactive with your cybersecurity is essential to keeping your company secure, and one way to do that is adopting a deny-by-default philosophy.  But what is deny-by-default? W...

Earlier this year, Gartner predicted that companies that implement Continuous Threat Exposure Management, or CTEM, will have 3x fewer incidents year-on-year.  Visibility is critical when it comes to cybersecurity, and a programmatic approach to that visibility should include CTEM in some capacity, according to SecurityIntelligence. But how does CTEM actually work? What problems does it solve?...

Data exfiltration has become a serious issue for companies in today’s world. The unauthorised removal and theft of company data are becoming more commonplace as cybercriminals become more sophisticated in their attacks.  A good Data Loss Prevention, or DLP, strategy used to be enough to help protect the enterprise from malicious attacks, but has this changed? Is DLP dead? In this episode of t...

In today's interconnected world, where technology plays a vital role in our personal and professional lives, the effectiveness of cybersecurity measures has become paramount and the role of Chief Information Security Officer is under more scrutiny than ever before.   And with many CISOs dealing with fragmented vendors, lack of talent to pace with a dynamic environment and even an inabili...

Physical identity plays a crucial role in security. Through biometric authentication technology like facial recognition and iris reading to fingerprint reading, physical identity is used to verify who a person is.  The use of physical identity is becoming more and more prevalent in public places, particularly in healthcare where patient safety and security is paramount.  In this episode...

Small and medium-sized enterprises (SMEs) face numerous challenges when it comes to cybersecurity.  One of the most significant challenges is the lack of resources, including budget and personnel, to invest in robust cybersecurity measures. This often leaves SMEs vulnerable to cyber threats, such as phishing attacks, ransomware, and data breaches.  Additionally, SMEs may not have the exp...

Effectively managing third-party risk has become crucial for companies. Not only is it key to helping protect a company's reputation, which is crucial for maintaining customer trust and loyalty, but many industries are subject to regulatory requirements that mandate compliance with specific standards and guidelines, and companies must ensure that their third-party vendors also comply with these re...

Supply chain attacks occur when hackers compromise a third-party vendor's software or hardware, which then infects the vendor's customers. Such attacks can be devastating, as they allow the attacker to gain access to the systems and data of many organisations. To mitigate the risks of supply chain attacks, organisations should perform due diligence on their vendors, monitor their vendor's security...