July 17, 2014 By Rick M Robinson 2 min read

In the world of IT systems, a little mistrust can sometimes be a good thing. As you read this, a busy executive is glancing at her email inbox. A message from a longtime colleague has a link to an interesting-sounding study — but something doesn’t feel quite right.

The email seems vaguely generic, without the personal tone she’d expect from an old friend. When she checks the return address, it doesn’t match the colleague’s email. Instead of clicking on the link, she deletes the email, thus protecting herself and her company from a spear-phishing cyber attack.

Mistrust can be a good thing, but we cannot live that way. If we had to be suspicious of everything in our inboxes, we would never get through them. Business, like all of social life, depends on networks of trust, and the great challenge for IT systems is building those networks.

A World of IT Systems Threats — and Smart Responses

In today’s Internet of Everything, security threats can pop up anywhere. Large organizations record billions of security events every day; The Wall Street Journal (WSJ) reports that a leading breakfast cereal maker is taking steps to protect its trade secrets from cyber exposure; and MLB.com reports on a breach that exposed the Houston Astros’ negotiations as last season’s trade deadline approached.

At the same time, enterprises are getting more savvy. As Danny Yadron notes in the WSJ, corporate boards are stepping up to the cyber security challenge. No longer is security regarded as a purely technical matter to be left for the IT department to deal with on its own. Cyber security threats are a fundamental risk of doing business, and business leaders are responding proactively.

New Technologies, New Threats, New Defenses

A new generation of technology is posing new security risks on all sides. Cloud computing, big data and especially mobile devices pose complex and growing challenges. The bring-your-own-device (BYOD) trend is filling workplaces with mobile devices that IT security teams cannot directly control — and that often have serious security gaps.

At the same time, these new technologies also hold out the promise of better security. In a new e-book, “Staying Ahead in the Cyber Security Game: What Matters Now,” leading security experts Erik van Ommeren, Martin Borrett and Marinus Kuivenhoven look at the current state of play in protecting the security of IT systems.

These experts find plenty of reasons to stay on guard, but also discover grounds for optimism. Big data analytics is allowing organizations to view billions of security events in context, identifying subtle patterns that can signal an attack. The cloud, in turn, can place this wealth of security insights into the hands of the defenders who need it; and while mobile devices pose security challenges, they have the potential to offer better security than the traditional PC.

As van Ommeren, Borrett and Kuivenhoven point out, the evolving IT systems security landscape has not changed some fundamental truths: Security involves everyone, not just IT professionals, and security is all about trust. Using fear alone to promote security is a strategy that is long past its sell-by date. Effective security comes from policies that build trust, and these policies begin at the top.

Download the free e-book: Staying Ahead of the Cyber Security Game

More from CISO

CISO vs. CEO: Making a case for cybersecurity investments

4 min read - Ask CISOs why they think there is a cyber skills shortage in their organization, what keeps them up at night or what the most important issue facing the industry is — at some point, even if not the first response, they will bring up budgets.For example, at RSA Conference 2024, a roundtable discussion about issues facing the cybersecurity industry, one CISO stated bluntly that budgets — or lack thereof — are the biggest problem. At a time when everything is…

Making smart cybersecurity spending decisions in 2025

4 min read - December is a month of numbers, from holiday countdowns to RSVPs for parties. But for business leaders, the most important numbers this month are the budget numbers for 2025. With cybersecurity a top focus for many businesses in 2025, it is likely to be a top-line item on many budgets heading into the New Year.Gartner expects that cybersecurity spending is expected to increase 15% in 2025, from $183.9 billion to $212 billion. Security services lead the way for the segment…

On holiday: Most important policies for reduced staff

4 min read - On Christmas Eve, 2023, the Ohio State Lottery had to shut down some of its systems because of a cyberattack. Around the same time, the Dark Web had a “Leaksmas” event, where cyber criminals shared stolen information for free as a holiday gift. In fact, the month of December 2023 saw more than 2 billion records breached and 1,351 disclosed security incidents, according to research from IT Governance — an increase of 332% and 187%, respectively, over the month of…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today