Four Things Your CISO Wants Your Board to Know
For years, it seems like we’ve been rationalizing why your company’s Chief Information Security Officer (CISO) deserves a seat at the boardroom table. In many industries, we’ve come a long way since then. At more and more organizations, CISOs have stepped up and begun conferring regularly with the CFO, CTO, and CEO on security strategy,…
CISO Conversations: The Difference Between Securing Cities and Businesses
A city is vastly different from a commercial company. We wanted to learn if a city CISO needs to be similarly different to a private sector CISO. SecurityWeek spoke to two city CISOs, from the City of Tampa, and from Tallahassee. Martin Zinaich heads cybersecurity at Tampa – the 47th city in the U.S., with…
China theft of US agriculture sector trade secrets prompts government guidance
If you didn’t think the agriculture and food sector is of national security significance, then the issuance of the Insider Risk Mitigation Guide by the National Counterintelligence and Security Center (NCSC) in conjunction with the Department of Defense’s Center for Development of Security Excellence (CDSE) should be the equivalent of the bat-signal shining over Gotham….
The OWASP Top 10 Threats Haven’t Changed in 2021 — But Defenses Have
The more things change, the more they stay the same. Despite a changing threat landscape and threat actors who keep upping their game, the vulnerabilities behind the threats remain consistent. The OWASP Top 10, ranked by the Open Web Application Security Project, lists the 10 most prominent and dangerous risks and threats for applications. The OWASP…
Data Security Company Symmetry Systems Raises $15 Million
The round was led by Prefix Capital and ForgePoint Capital, with participation from Accenture Ventures, as well as individual investors Tom Gonser, founder of DocuSign; Omkhar Arasarathnam, engineering director at Google Cloud; Bob Gleichauf, EVP at InQTel and ex-CTO at Cisco; David Tsao, VP of security engineering at Marqeta; and Sameer Sait, CISO at Amazon…
The VC View: Data Security – Deciphering a Misunderstood Category
I’m both excited and concerned to write about data security as one of the hot trends to monitor in 2021. Data security is a tough topic to summarize and I’d argue it may be the most misunderstood category in security right now. We’re a raw industry that has been shaken up multiple times for years….
All Eyes on PCAP: The Gold Standard of Traffic Analysis
PCAP, or full packet data capture for analysis, does what it says – it captures the entirety of every packet that comprises the network traffic (both metadata and content). If something happens on the network, PCAP knows about it. Whether it is malware moving data around, or staff arranging a private party, it can be…
CISO Conversations: Princeton, Cal State and Ohio State CISOs Talk Higher Ed Cybersecurity
A few weekends ago, I went to a birthday party for a buddy of mine. The theme was “Lord of the Rings.” When I arrived, I could see that many of my friends were already there, bunched up in groups of five or six, as the host circulated among them. I said hi to the…
SecurityWeek to Host Supply Chain Security Summit on March 10, 2021
In the wake of the SolarWinds mega-hack that continues to unravel, software supply chain security and fragility is again on the front-burner for enterprise security decision makers. The complexity and opaqueness of the software supply chain has led to nation-state compromises and major worries that we’re only seeing the tip of the iceberg. Free to…
Data loss prevention strategies for long-term remote teams
Before the recent pandemic, many executives began appreciating the risks and opportunities associated with cybersecurity. A 2019 survey on cybersecurity priorities from Optiv Security found that 96% of CISOs are taking “a more strategic approach to cybersecurity,” and many were even willing to slow business development to account for cybersecurity-related risks. This was great news…
