July 17, 2014 By Rick M Robinson 2 min read

In the world of IT systems, a little mistrust can sometimes be a good thing. As you read this, a busy executive is glancing at her email inbox. A message from a longtime colleague has a link to an interesting-sounding study — but something doesn’t feel quite right.

The email seems vaguely generic, without the personal tone she’d expect from an old friend. When she checks the return address, it doesn’t match the colleague’s email. Instead of clicking on the link, she deletes the email, thus protecting herself and her company from a spear-phishing cyber attack.

Mistrust can be a good thing, but we cannot live that way. If we had to be suspicious of everything in our inboxes, we would never get through them. Business, like all of social life, depends on networks of trust, and the great challenge for IT systems is building those networks.

A World of IT Systems Threats — and Smart Responses

In today’s Internet of Everything, security threats can pop up anywhere. Large organizations record billions of security events every day; The Wall Street Journal (WSJ) reports that a leading breakfast cereal maker is taking steps to protect its trade secrets from cyber exposure; and MLB.com reports on a breach that exposed the Houston Astros’ negotiations as last season’s trade deadline approached.

At the same time, enterprises are getting more savvy. As Danny Yadron notes in the WSJ, corporate boards are stepping up to the cyber security challenge. No longer is security regarded as a purely technical matter to be left for the IT department to deal with on its own. Cyber security threats are a fundamental risk of doing business, and business leaders are responding proactively.

New Technologies, New Threats, New Defenses

A new generation of technology is posing new security risks on all sides. Cloud computing, big data and especially mobile devices pose complex and growing challenges. The bring-your-own-device (BYOD) trend is filling workplaces with mobile devices that IT security teams cannot directly control — and that often have serious security gaps.

At the same time, these new technologies also hold out the promise of better security. In a new e-book, “Staying Ahead in the Cyber Security Game: What Matters Now,” leading security experts Erik van Ommeren, Martin Borrett and Marinus Kuivenhoven look at the current state of play in protecting the security of IT systems.

These experts find plenty of reasons to stay on guard, but also discover grounds for optimism. Big data analytics is allowing organizations to view billions of security events in context, identifying subtle patterns that can signal an attack. The cloud, in turn, can place this wealth of security insights into the hands of the defenders who need it; and while mobile devices pose security challenges, they have the potential to offer better security than the traditional PC.

As van Ommeren, Borrett and Kuivenhoven point out, the evolving IT systems security landscape has not changed some fundamental truths: Security involves everyone, not just IT professionals, and security is all about trust. Using fear alone to promote security is a strategy that is long past its sell-by date. Effective security comes from policies that build trust, and these policies begin at the top.

Download the free e-book: Staying Ahead of the Cyber Security Game

More from CISO

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

Boardroom cyber expertise comes under scrutiny

3 min read - Why are companies concerned about cybersecurity? Some of the main drivers are data protection, compliance, risk management and ensuring business continuity. None of these are minor issues. Then why do board members frequently keep their distance when it comes to cyber concerns?A report released last year showed that just 5% of CISOs reported directly to the CEO. This was actually down from 8% in 2022 and 11% in 2021. But even if board members don’t want to get too close…

The CISO’s guide to accelerating quantum-safe readiness

3 min read - Quantum computing presents both opportunities and challenges for the modern enterprise. While quantum computers are expected to help solve some of the world’s most complex problems, they also pose a risk to traditional cryptographic systems, particularly public-key encryption. To ensure their organization’s data remains secure now and in the future, chief information security officers (CISOs) should educate themselves about quantum computing, proactively address the coming quantum risks to cybersecurity and work to establish cryptographic agility in their enterprise.A future cryptographically…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today