Content by Anna Delaney

How Can We Fill the Cybersecurity Education Gap?

Anna Delaney  •  June 20, 2022

CTO Daniele Catteddu of the Cloud Security Alliance sees significant gaps in how the cybersecurity industry delivers education and training. For example, he says, while organizations are demanding Zero Trust services and guidance on implementation, the industry's offerings do not meet that demand.

How Can We Simplify Cyber Defense?

Anna Delaney  •  June 20, 2022

The overlying problem in cybersecurity is scale and the complexity that comes from that scale, says Philip Reitinger, president and CEO of the Global Cyber Alliance. He says we need to simplify how we defend ourselves and "give individuals and companies products that meet them where they are."

ISMG Editors: Are We Closing in on a Federal Privacy Law?

Anna Delaney  •  June 17, 2022

In the latest weekly update, Jeremy Grant, coordinator of the Better Identity Coalition, joins three editors at ISMG to discuss important cybersecurity issues, including where we are with passwordless, if we are getting closer to a U.S. federal privacy law, and next-gen authentication technologies.

Highlights of RSA Conference 2022

Anna Delaney  •  June 16, 2022

The latest edition of the ISMG Security Report includes highlights and observations from RSA Conference 2022, including a key message from RSA CEO Rohit Ghai. It also discusses the value of automation and the Cybersecurity and Infrastructure Security Agency's mission to grow cyber talent.

Challenges of Building a Global Security Program

Anna Delaney  •  June 15, 2022

CISO Eric Sanchez of Kyowa Kirin North America discusses the nuances and challenges of building a security program at an international company. He shares strategies for managing the people, operations and technology and explains why strong interpersonal and crisis management skills are a must.

Are We on the Verge of Getting to Passwordless?

Anna Delaney  •  June 15, 2022

Jeremy Grant of Venable says we are getting closer to eradicating the password. He says that in the next 12 to 18 months, "There will be a lot of uptake from big, consumer-facing brands to finally kill the password and let people instead create a passkey when they sign up for an account."

Where Collaboration Works - and Where It Doesn't

Anna Delaney  •  June 15, 2022

Jeremy Grant says many areas in cybersecurity are fragmented, but Grant Schneider adds, "We don't want everyone developing collaboratively because the competition drives a lot of innovation in this space." The two discuss striking the right balance between industry fragmentation and collaboration.

Social Media and the Threat to Cybersecurity

Anna Delaney  •  June 15, 2022

"Social media is probably the newest and most impactful thing that we've seen from a cybersecurity perspective at Maricopa County," says its CISO, Lester Godsey. The only response to misinformation and disinformation campaigns, he says, is to use the same platform and respond with the facts.

Envisioning a New Model for Information Sharing

Anna Delaney  •  June 14, 2022

Microsoft Azure Chief Security and Risk Officer Edna Conway says the industry is getting better at sharing information, but adds, "We don't have the protections that we need." She envisions a new model for information sharing that will be better suited for use in the next 10 years.

Partnering to Secure Industrial Infrastructure

Anna Delaney  •  June 14, 2022

Former Rockwell Automation CISO Dawn Cappelli discusses the mission of the new Dragos OT-CERT - a cybersecurity resource designed to help industrial asset owners and operators build their OT cybersecurity programs, improve their security postures and reduce OT risk - and her role as its director.

The Cybersecurity Dilemma for SMEs

Anna Delaney  •  June 14, 2022

SMEs recognize the need to increase their cybersecurity spend, but limited resources can make them uncertain about which tools to invest in, says Matt Aldridge, principal solutions consultant at OpenText. He explains why a comprehensive approach is key to achieving and maintaining cyber resilience.

What Should Security Leaders Be Preparing for Now?

Anna Delaney  •  June 14, 2022

Security leaders shouldn't ignore current geopolitical tensions, which are going to infiltrate into private sectors, says Troy Leach of the Cloud Security Alliance. And John Kindervag of ON2IT Cybersecurity says - for that reason - organizations need to stop being cheap on cybersecurity.

Security in the Cloud Requires a New Mindset

Anna Delaney  •  June 14, 2022

During the accelerated digital transformation of the past two years, enterprises have fully embraced multi-cloud environments. But security practitioners are learning that security in the cloud requires a new mindset and a unique set of skills, says Jonathan Trull, CISO of Qualys.

The Top 5 Security Practices With the Best Outcomes

Anna Delaney  •  June 10, 2022

What are the top five security activities that lead to the best outcomes, and why do they work so well? Those critical issues were closely examined in a recent study commissioned by Duo Security/Cisco, says Helen Patton, advisory CISO, who discusses the findings.

Why User Awareness Training Misses the Mark

Anna Delaney  •  June 10, 2022

A great deal of awareness training has been offered to users - including phishing simulations - but none of it seems to have led to a significant change in their poor security behaviors and decision-making skills, says Oz Alashe, CEO of CybSafe.