“For an industry that builds client relationships and growth on partnership and trust with its customers, we're also an industry that sells zero trust, as a goal. So those two things can be very dichotomous in concept,” said the chief information security officer for the cloud services of NTT.
Fifteen years ago, working in as an intelligence analyst covering transportation issues for Air Force Special Operations Command, Stephynie Velez saw a growing threat space across her supply chain. “It was a time when there weren’t cyber threat analysts — they weren’t sure if you needed to take cyber personnel and make them learn intelligence analysis or the other way around." Velez was the other way around.
For the Seattle Public Schools chief information security officer, her passion is clear: "small businesses and nonprofits, and in particular, schools. They’re in the same boat. They may be larger, but they don't have the resources. They need something that's easy, inexpensive, and straightforward.”
“Partnering with ambassadors allows us to tailor content for regions and cultures, as well as threat trends targeting specific job functions or locations,” said the head of security awareness at Equinix. “To keep ambassadors engaged and motivated, I developed recognition and certification plans that give them visibility at the corporate level for all their efforts, and provide certificates they can put on their resumes for external recognition.”
“Every single person, whether they know it or not, is walking around with a million-dollar cell phone and a million-dollar laptop,” due to the data they come in contact with, said Waseem, a passionate privacy advocate, said the director of cyber education for the National Cyber Security Alliance. “And if you understand why your information is worth hundreds of thousands or millions of dollars to other people, then you are more apt to protect that data.”
This Week, in the Leadership and Communications section: Boards rethink incident response playbook as ransomware surges, How CISOs and CIOs should share cybersecurity ownership, How CISOs are Building a Modern Cybersecurity Partnership, & more!
This week in the AppSec News, Mike and John talk: RCE in Azure OMI, punching a hole in iMessage BlastDoor, Travis CI exposes sensitive environment variables, keeping code ownership accurate, deploying security as a product, IoT Device Criteria (aka nutrition labels), & more!
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.