Business Can Minimise Cybersecurity Risks And Drive Profit

An astonishing 70 percent of the companies on the Fortune 500 a decade ago are no longer listed. The reason is simple: digital disruption.

There's not a CIO on the planet today that isn't expected to deliver on the promise of digital technologies to transform customer-facing services and internal processes. This means supporting new cloud and mobile-led ways of working while controlling risk in a digital world full of menacing new threats.

To make this a reality, IT and security must come together to harmonise the twin aims of profit and risk management. Their secret weapon is none other than that frontline IT stalwart the service desk, supported by automation and endpoint management.

Adapt or Die

The cautionary tales of Blockbuster, Kodak and BHS on the one hand, and the success stories of Airbnb and Uber on the other, are perfect examples of the power of digital transformation.

It's true that the US and Europe have approached this from opposite sides: the former focused on profit and the latter on protecting consumer privacy and improving security. The post-Brexit UK sits somewhere awkwardly in the middle, depending on whether or not it harmonises its laws with Europe after the split.

Whatever the nuances, enabling new digital ways of working has undeniably led to an explosion in the number of endpoints organisations need to manage – especially mobile devices.

And this is leading to an increased risk of data loss and/or theft. The Ponemon Institute recently polled over 18,000 US IT professionals and 69 percent claimed BYOD had significantly increased endpoint risk.

Whether we're talking about enterprise mobility or other parts of the organisation, new digital ways of working introduce new risks, both from external malfeasance and insider negligence. Some 18 million new malware samples across the board were recorded in Q3 2016 alone.

Financially motivated cyber-criminals, sophisticated state-backed cyber spies and publicity seeking hacktivists all represent a major threat today.

Unpatched vulnerabilities remain a bountiful attack vector for them, and the impact of resulting breaches or service outages can be massive. TalkTalk was breached last year via a simple SQL injection bug which should have been patched. The firm has admitted that the total cost after remediation, along with the impact on trading and customer retention, could be as high as £80 million.

The insider risk can be malicious, but most often it's accidental. Something as simple as clicking on a malicious ransomware link in an email, losing a BYOD device in a bar, or downloading an unapproved app could expose the organisation to unnecessary risk. A FoI request revealed 62 percent of data breach incidents reported to the ICO in the first few months of 2016 came as a result of human error.

Arming the Service Desk

A median post-breach dwell time of 146 days in 2015 tells us that security and IT teams still don't talk to each other enough. CIOs and CISOs will have to collaborate far more closely if they're going to support digital transformation strategies effectively.

The answer is to tool up the service desk with unified endpoint management covering multiple layers of protection, to deal with the varied threats facing organisations.

This approach should include: automated patch and configuration management to enhance stability and close down attacks exploiting known bugs; app whitelisting to mitigate the risk of zero day threats; encryption to protect data if it gets into the wrong hands; tools to automatically apply security policies to removable media and all corporate and staff-owned devices; and AV to deal with ‘background noise' malware.

Automation is key here, enabling the IT team to extend security right out to all endpoints and free up individuals to focus on more critical tasks. And it's the perfect role for a service desk which has unrivalled visibility into ‘incidents', which means it's often the first to acknowledge events which may herald a serious breach/attack. It's in the right place to escalate to security teams, but on the other side, security needs close communication lines into the service desk.

The service desk is also in a great position to monitor and report on ongoing efforts, supporting compliance and even fostering a security-first culture among staff.

In the end, effective digital transformation needs to balance agility and speed on the one hand with security and compliance on the other. This won't just require automated endpoint management led by the service desk.

It will require a cultural change, an IT team willing to listen to staff and ensure any changes don't block productivity. Fail on this front, and the creeping hand of shadow IT will undo all its hard work to support the business.

SC Magazine:                    CIOs Are Neglecting Process & Most Efficient Options:

Company Boards Need To Get A Grip:

 

« Spanish Police Arrest Banking Malware Suspect
Stuxnet, Secrecy & The New Era of Cyber War »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Axiomatics

Axiomatics

Axiomatics provides dynamic authorization and access control solutions to protect critical data assets.

ID Quantique (IDQ)

ID Quantique (IDQ)

ID Quantique is a world leader in quantum-safe crypto solutions, designed to protect data for the long-term future.

Future of Cyber Security Europe

Future of Cyber Security Europe

Future of Cyber Security Europe is a European wide event examining the latest cyber security strategies and technologies.

CyberGuarded

CyberGuarded

CyberGuarded are an accredited vendor independent information security testing and auditing company.

SafeLogic

SafeLogic

SafeLogic provides strong encryption products for solutions in mobile, server, Cloud, appliance, wearable, and IoT environments that are pursuing compliance to strict regulatory requirements.

Lithuanian National Accreditation Bureau

Lithuanian National Accreditation Bureau

Lithuanian National Accreditation Bureau is the national accreditation body for Lithuania. The directory of members provides details of organisations offering certification services for ISO 27001.

iZOOlogic

iZOOlogic

iZOOlogic protects hundreds of the world’s leading brands, across banking, finance and government from cybercrime. We provide strong cyber defence solutions to protect client digital assets.

TalaTek

TalaTek

TalaTek is a full-service risk management firm providing expert services in risk management, cybersecurity, and compliance.

Spohn Solutions

Spohn Solutions

Spohn combines highly-experienced staff with a vendor neutral approach to deliver optimal solutions for IT Security and Compliance.

ServerScan

ServerScan

ServerScan specializes in providing server scanning & compliance services to organizations of all types and sizes.

Shorebreak Security

Shorebreak Security

Shorebreak Securioty specialize in conducting highly accurate, safe, and reliable Information Security tests to determine the risks posed to your business.

Ekco

Ekco

Ekco is one of Europe’s leading managed cloud providers. With a network of infrastructure and security specialists across Europe, we’ve perfected our approach to supporting digital transformation.

Xobee Networks

Xobee Networks

Xobee Networks is a Managed Service Provider of innovative, cost-effective, and cutting-edge technology solutions in California.

Cytex

Cytex

Cytex is the All-in-One solution for SMB data protection & compliance needs.

Queen Consulting & Technologies

Queen Consulting & Technologies

Queen Consulting & Technologies specialize in providing IT support, management, and Security to Gov’t Contractors, CPAs, and Nonprofits.

BlazeGuard

BlazeGuard

At BlazeGuard, we understand that navigating the complex world of cybersecurity can be challenging. That’s why we make it our mission to simplify the process for you.