Domenico Daelli

Cyber Security Breaches Are Inevitable, It's Time For A New Approach Interesting read from Forbes' contributor Keith Ferrazzi While it seems like it's been a while since breaches were acknowledged as inevitable, but between my conversations w/ clients & colleagues and articles like this, apparently the message hasn't quite landed yet. Excerpt: "The hyperscaling of cyberattacks in the cloud era is scary. According to research from Proofpoint, 94% of cloud customers were targeted at some point during every month of 2023. Of those targeted companies, 62% were successfully compromised. “We need to start with the assumption that the system is already compromised,” says Ajay Waghray, CIO of PG&E, a California-based utility. “But my fear is most CISOs remain too narrowly focused on stopping breaches alone... Waghray’s view of cyber resilience <is that> we need to do more than deflect cyberattacks: we need to build the capacity to sustain business operations during and after a cyberattack...<he> identified four key elements of a cyber resilience and recovery posture: planning, practice, proactive detection, and partnerships. " CEO Bipul Sinha leads Rubrik, a cyber resilience firm, and says cyber resilience requires two key elements: knowing where sensitive corporate data lives (to quickly restore standard business operations) and the ability to evolve existing security policies to prepare the organization for future threats. “Knowing that cyberattacks are inevitable, leaders must do advance work, to have the policies, systems and strategies in place so that when the attack happens, the business can keep moving forward,” says Sinha. “But the work doesn’t end there. You must learn and evolve in the aftermath of every attack to get stronger. And that requires a new organizational mindset. (Ferrazzi) we must not let groupthink and organizational inertia prevent us from adapting to the future...<we need> intellectual flexibility..." #CyberSecurity #LeadershipStrategy #CyberResilience #Breaches #Forbes #KeithFerrazzi https://lnkd.in/eAMy_uPN

7

In our interconnected digital landscape, credential stuffing attacks have emerged as a significant threat, compromising both personal and corporate security. Check out my latest publication delves into effective strategies and best practices to fortify your cybersecurity defenses against these relentless assaults.

55

2 Comments

AI and Industrial Security in the Energy Transition | The Industrial Security Podcast Eps. 125 What's the number one investment that people routinely make in industrial processes? Engineering teams routinely invest to make processes more efficient. One way to achieve this is by making decision-making about the process more efficient, accurate, effective, and faster. AI is essential in that process. AI is going to be essential for all of us to make our processes more efficient. On the cybersecurity side, the bad guys are investing in making their attacks more efficient as well. So, on the defensive side, we need to invent ways to use AI to make our defenses more efficient. Bad guys and good are using AI to make everything more efficient. We can't ignore this anymore; it has to become the common language, the common wisdom of the space going forward. I'm grateful to Leo Simonovich, VP & Global Head of Industrial Cyber and Digital Security at Siemens Energy for sharing his thoughts in this episode of the #IndustrialSecurityPodcast I look forward, fortunately or unfortunately, to thinking about AI a lot more in the years ahead. Listen to the full episode here and let me know what your thoughts are on AI in the industrial space by commenting below ➡️ https://hubs.li/Q02vDjSW0

22

Delighted to discuss with my colleagues & Evanta about the budget allocated to Cyber security. A governance exercise that is becoming more complex in a tense economic context while the cyber threat continues to grow. How to arbitrate between subjects for the best possible impact? Come take part in this exchange with us! #cyber #Finance #gouvernance

27

Hackers possess deep, nontechnical insights that often go unnoticed by CISOs, allowing them to exploit vulnerabilities and stay ahead of security defenses. They strategically time their attacks, gather intelligence on organizational changes, and take advantage of corporate cultures that prioritize speed over caution. Furthermore, hackers utilize advanced tactics like deepfakes and exploit the lack of independent controls within organizations. To effectively counter these threats, security professionals must understand and address these overlooked strategies in their defensive measures. #CyberSecurity #Hacking #CISO #ThreatIntelligence #SecurityAwareness #Deepfakes #Infosec

3