Security Staff Acquisition & Development

Earlier this week, a portion of a Cybrary job description went viral on social media that left many in the community wondering — what was the company thinking? Cybrary CEO Kevin Hanes spoke to SC Media about that misstep on the job description — owning the mistake, but also offering some more context and perhaps some lessons learned.

The senators praised a number of new proposed cybersecurity rules from the SEC, but called for more, including a requirement for publicly traded companies to disclose to investors whether they have a cybersecurity expert on their board of directors and if not, provide an explanation for why.

Phishing is the No. 1 cause of cyber incidents, so a security strategy that relies on the end-user is likely to fail, cybersecurity experts say. The best form of security awareness training for employees is brief, frequent and focused.

The concept of venture going to a business focused on education and training, rather than emerging technology, is not a typical one. But it's acknowledgement that technology alone will not address today's threat landscape. ThriveDX targets people looking to make a career change, with plans to also integrate training into undergraduate and graduate programs at universities.

Insurers say clients might be overestimating the danger from tensions between Russia and Ukraine, underestimating the risk, and insufficiently clear on what their policies might provide in the event insurance becomes critically important.

As financial firms embrace security awareness training to instill good cyber-hygiene, getting employees to stick to the rules has been a challenge, especially at a large organization where people might often be working remotely.