WITH MANY NEW CONNECTED ASSETS, NEED A SINGLE SOURCE OF TRUTH

The band-aid security solutions that were put in place last year now need to be replaced with scalable, long-term, strategies, feels Adam Palmer, Chief Cybersecurity Strategist, Tenable

- Sunil Rajguru

The post-Covid world has expanded the workspace thanks to the work-from-home and mobile workforce. But with the proliferation of so many devices, how has the threat landscape also expanded and what are the major threats?

The shift to a remote work model pushed organizations to leverage new cloud-based technologies and approaches to optimize their teams’ performance. The issue is many of these cutting-edge technologies aren’t built with security in mind — they’re designed for ease of use. This lack of security may have exposed assets and networks to vulnerabilities that can now easily be leveraged by cybercriminals for attacks.

Thanks to this, the job of the CISO has expanded and been made more complicated. What is the new role of the CISO and what are the metrics he or she uses to assess cyber risks?

The band-aid security solutions that were put in place last year now need to be replaced with scalable, long-term, strategies. CISOs need to harmonize and ensure that security is integrated across all applications, critical data, cloud-based assets, DevOps, network infrastructure, and operational technology. With so many new connected assets, having a single source of truth can make a world of difference.

Just as other organisations have a system of record for managing their business and understanding risk, strategic business and technology decisions need to factor in cyber exposure as a quantifiable metric of cyber risk in the same manner as other business exposures, such as economic or environmental risks.