March 4, 2016 By Dimple Ahluwalia 2 min read

In a recent article on TechRepublic, researchers at the University of Arizona’s Artificial Intelligence Laboratory described their ongoing study into the operations, interactions and communications of the hacker community. Specifically, researchers noted how organized they are, how tight-knit their community is and how they “always have and always will change things up.” Sound familiar?

Cybercriminals do not necessarily have a formally written framework under which they operate, but it may be surprising to learn that they are organized around some modus operandi. This is deeply cultural, social and unstructured, and it is effective in achieving their objectives.

Establishing a Modus Operandi for Security

As an IT or security leader with strong governance policies and increasing pressures thanks to compliance, business innovations and workforce behaviors, you cannot rely on fixed technology responses to navigate the security minefield. Simply throwing more security technology at a growing problem is like reaching for a simple ibuprofen for a migraine headache: It only provides temporary relief and doesn’t cure the underlying cause. In security, it is important to understand the context and critical interdependencies that put your organization at risk and then set your priorities and guiding principles accordingly.

Thinking about security from the perspective of modus operandi and working with a framework that delivers the guidance and principles behind decision-making helps leaders. Everyone in the organization is better equipped to navigate through the toughest of changes, growing business needs and, most of all, cyber dangers.

At IBM, we work with clients to adopt a framework called 10 Essential Security Practices in which we assess security capabilities, readiness and maturity. Then we develop a profile for security governance and processes, helping clients to establish long-term programs.

Essential Security Practices to Consider

The 10 essential security practices are designed to be the modus operandi for security and IT leaders. The framework encourages professionals to assess and develop appropriate strategies based on:

  1. A risk-aware culture;
  2. The establishment of intelligent security operations and rapid threat response;
  3. Secure collaboration in the social and mobile workplace;
  4. The development of security-rich products and applications by design;
  5. A hygienic approach to securing systems and infrastructure;
  6. The creation of a security-rich and resilient network;
  7. Best practices for addressing security complexities in the cloud and virtualization technologies;
  8. The careful management of third-party security compliance;
  9. Assuring data security and privacy; and
  10. How to manage the digital identity life cycle.

Conclusion

To operate cybersecurity as a true enterprise function, organizations need a framework within which to establish their security program, understand the context and critical interdependencies of initiatives and set priorities accordingly. Such a framework can also be used to identify gaps, monitor progress and achieve other strategic security objectives. This is all done while ensuring security programs are fully coordinated with an organization’s core business objectives and initiatives.

Are you ready to adopt a framework and prioritize a long-term plan for your security capabilities, readiness and maturity? Watch this video series about the 10 essential security practices to learn more.

https://www.youtube.com/watch?v=bWjrVXB0ZvQ

More from CISO

Overheard at RSA Conference 2024: Top trends cybersecurity experts are talking about

4 min read - At a brunch roundtable, one of the many informal events held during the RSA Conference 2024 (RSAC), the conversation turned to the most popular trends and themes at this year’s events. There was no disagreement in what people presenting sessions or companies on the Expo show floor were talking about: RSAC 2024 is all about artificial intelligence (or as one CISO said, “It’s not RSAC; it’s RSAI”). The chatter around AI shouldn’t have been a surprise to anyone who attended…

Why security orchestration, automation and response (SOAR) is fundamental to a security platform

3 min read - Security teams today are facing increased challenges due to the remote and hybrid workforce expansion in the wake of COVID-19. Teams that were already struggling with too many tools and too much data are finding it even more difficult to collaborate and communicate as employees have moved to a virtual security operations center (SOC) model while addressing an increasing number of threats.  Disconnected teams accelerate the need for an open and connected platform approach to security . Adopting this type of…

The evolution of a CISO: How the role has changed

3 min read - In many organizations, the Chief Information Security Officer (CISO) focuses mainly — and sometimes exclusively — on cybersecurity. However, with today’s sophisticated threats and evolving threat landscape, businesses are shifting many roles’ responsibilities, and expanding the CISO’s role is at the forefront of those changes. According to Gartner, regulatory pressure and attack surface expansion will result in 45% of CISOs’ remits expanding beyond cybersecurity by 2027.With the scope of a CISO’s responsibilities changing so quickly, how will the role adapt…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today