Cybersecurity ranked most serious enterprise risk in 2022August 31, 2022 by Security StaffUncertainty has become a business standard in 2022, with enterprise leaders feeling cautiously optimistic about their ability to navigate future economic, social and geopolitical uncertainty.A survey of more than 700 U.S. executives by PricewaterhouseCoopers (PwC) identified top enterprise risks observed in 2022.State of 2022 enterprise riskThe survey identified rising cyberattack levels; talent acquisition and retention; supply chain disruptions and increasing production costs to be the most serious risks facing enterprise organizations today.Image courtesy of PwCCybersecurityAmid increasing geopolitical tensions and consumer privacy concerns, 40% of business leaders ranked cybersecurity as the number one serious risk facing their companies. It’s not just top of mind for chief information security officers (CISOs) and chief risk officers (CROs) — executives across the entire C-suite ranked cybersecurity as a serious risk. In addition, 58% of corporate directors said they would benefit most from enhanced reporting around cybersecurity and technology.With growth in mind, executives are increasing investments in digital transformation (53%), information technology (IT) (52%), and cybersecurity/privacy (49%).Labor shortagesNearly two-thirds of businesses (63%) have changed or are planning to change processes to address labor shortages, up from 56% in January 2022. Finding the right talent continues to be a challenge for business leaders. Talent acquisition came in second as a risk behind cyber, with 38% of respondents citing it as a serious risk. In order to attract talent, companies continue to explore new ways of working, including expanding remote work options for roles that allow it. A large majority (70%) of respondents said they have either implemented this or have a plan in place. That, too, comes with risk, as the increase in remote work also comes with an expanded cyberattack surface for enterprise organizations.To view the full survey results, click here.

Increasing cybersecurity awareness in critical infrastructureImagine this: the power grid has been hacked by a nation-state and has catapulted us back to the Stone Age. No power, water, fuel, online communications or banking. No, this isn’t a story out of a Michael Crichton novel. In 2018, a dire warning from former British Secretary of Defense, Gavin Williamson, indicated Britain’s energy infrastructure had been spied on by Russia. He predicted countless deaths would result if their power grid was ever crippled.The critical infrastructure space is hardly an emerging topic in terms of cybersecurity. Case in point — in the spring of 2021, the Colonial Pipeline was hacked, leaving consumers from Texas up to New Jersey and New York vulnerable without a basic need: gas. Thankfully, the issue was resolved, but the implications of cyberattacks on critical infrastructure were exemplified by this incident.There are key concerns revolving around device capabilities, supply chain, security and safety in the critical infrastructure sector. According to Brian Wrozek, Principal Research Analyst with Forrester and former CISO of Texas Instruments and Optiv, an organizational focus on security awareness can help critical infrastructure organizations harden their operational technology (OT) and information technology (IT) against threats.The OT space has been a more challenging space to manage and prevent attacks primarily because OT utilizes unique equipment that is not able to leverage the common security controls used in IT environments. Systems were created to operate uninterrupted for a long period of time in specialized use cases and security was not built into the original design. Wrozek highlights that “on the plus side, OT environments have robust physical security controls and manual safety mechanisms that can provide protection to minimize potential damages.”This is a prime time for IT and cybersecurity executives to revisit and re-strategize security awareness training around this space. The IT and OT environments can never be treated in the same manner, which means companies will need to adjust their delivery methods and timing to align with the unique characteristics of the OT environments. Structuring security awareness training to fit critical infrastructure challenges and meet employees where they are in terms of cybersecurity knowledge may lead to more successful security outcomes. Wrozek recommends “holding a live workshop during lunch time at the factory, as all operators may not have a traditional office desk and laptop.”  Regardless, all OT operators and administrators should participate in the standard cybersecurity training curriculum offered by their companies, but taking it a step further, Wrozek emphasizes “incorporating cybersecurity training into the physical security and safety educational programs common in OT environments will improve participation and adoption.”What should the ideal cybersecurity training program look like in the OT space? Just like any company you onboard with, learn about the environment. In this case, the OT environment requires education, and the materials must be tailored to the needs and concerns of their target audience. Wrozek states the importance of helping new hires connect the dots, “For example, a successful phishing email could allow an attacker to pivot from the corporate environment to the OT environment. It doesn’t matter if the source of disruption was a weather event or specially constructed malware program, the consequences to human safety or the environment are the same.”Presently, ransomware still ranks as the top concern as OT environments continue their digital transformation journey, but developing a more cyber aware workforce can help mitigate the risk of a cyberattack on critical infrastructure.

I’m excited to announce our first project to deliver internet. As part of our Internet.org efforts to connect more people, we’re partnering with digitechuyo to launch data center’s that will connect thousands of people. This is just one of the innovations we’re working on to achieve our mission with Internet.org. Connectivity changes lives and communities. We’re going to keep working to connect people together.

Increasing cybersecurity awareness in critical infrastructureImagine this: the power grid has been hacked by a nation-state and has catapulted us back to the Stone Age. No power, water, fuel, online communications or banking. No, this isn’t a story out of a Michael Crichton novel. In 2018, a dire warning from former British Secretary of Defense, Gavin Williamson, indicated Britain’s energy infrastructure had been spied on by Russia. He predicted countless deaths would result if their power grid was ever crippled.The critical infrastructure space is hardly an emerging topic in terms of cybersecurity. Case in point — in the spring of 2021, the Colonial Pipeline was hacked, leaving consumers from Texas up to New Jersey and New York vulnerable without a basic need: gas. Thankfully, the issue was resolved, but the implications of cyberattacks on critical infrastructure were exemplified by this incident.There are key concerns revolving around device capabilities, supply chain, security and safety in the critical infrastructure sector. According to Brian Wrozek, Principal Research Analyst with Forrester and former CISO of Texas Instruments and Optiv, an organizational focus on security awareness can help critical infrastructure organizations harden their operational technology (OT) and information technology (IT) against threats.The OT space has been a more challenging space to manage and prevent attacks primarily because OT utilizes unique equipment that is not able to leverage the common security controls used in IT environments. Systems were created to operate uninterrupted for a long period of time in specialized use cases and security was not built into the original design. Wrozek highlights that “on the plus side, OT environments have robust physical security controls and manual safety mechanisms that can provide protection to minimize potential damages.”This is a prime time for IT and cybersecurity executives to revisit and re-strategize security awareness training around this space. The IT and OT environments can never be treated in the same manner, which means companies will need to adjust their delivery methods and timing to align with the unique characteristics of the OT environments. Structuring security awareness training to fit critical infrastructure challenges and meet employees where they are in terms of cybersecurity knowledge may lead to more successful security outcomes. Wrozek recommends “holding a live workshop during lunch time at the factory, as all operators may not have a traditional office desk and laptop.”  Regardless, all OT operators and administrators should participate in the standard cybersecurity training curriculum offered by their companies, but taking it a step further, Wrozek emphasizes “incorporating cybersecurity training into the physical security and safety educational programs common in OT environments will improve participation and adoption.”What should the ideal cybersecurity training program look like in the OT space? Just like any company you onboard with, learn about the environment. In this case, the OT environment requires education, and the materials must be tailored to the needs and concerns of their target audience. Wrozek states the importance of helping new hires connect the dots, “For example, a successful phishing email could allow an attacker to pivot from the corporate environment to the OT environment. It doesn’t matter if the source of disruption was a weather event or specially constructed malware program, the consequences to human safety or the environment are the same.”Presently, ransomware still ranks as the top concern as OT environments continue their digital transformation journey, but developing a more cyber aware workforce can help mitigate the risk of a cyberattack on critical infrastructure.

Automation & Cybersecurity Integration Are Coming to Backup OperationsNew study finds a growing need to juggle the historical data backup challenges of environment heterogeneity and data volume growth with newly emerging cybersecurity, automation, and cloud transformation initiatives.BELLEVUE, Wash., Aug. 16, 2022 (GLOBE NEWSWIRE) — Today, Bocada, a backup monitoring and reporting automation company, released findings from the company’s study, “Backup Monitoring Trends Report: Key Factors Influencing Data Protection Evolutions.” The report uncovers the issues impacting backup protection today, and the key issues driving future resource planning. Featuring commissioned survey findings from over 260 global IT professionals responsible for managing and/or influencing backup operations within their organizations, the study asked respondents about current challenges, issues they anticipate impacting their category, and how broader automation, cloud, and cybersecurity trends are influencing their future planning.Backup environment heterogeneity and data volume growth will continue driving backup monitoring difficulties. Securing data across backup applications is the most-cited backup management challenge, followed by protecting growing data volume.The shift to cloud-dominant backup operations is coming. Backup professionals expect over 60% of their operations to transition to the cloud within three years. This dynamic is likely leading to backup professionals citing cloud backup oversight as a top backup management concern.Automation is lagging in the backup management category…but on the horizon. Nearly two-thirds of backup professionals report zero automation applied to recurring backup management activities. But nearly 50% anticipate at least some automation implementation over the next two years.Backup operations will become more closely tied to cybersecurity. 47% of backup professionals expect greater incorporation of backup monitoring within cybersecurity programs. This makes it the number one trend they anticipate impacting their category in the next 3-5 years.”What’s remarkable about these findings is that they show increasing complexity entering the backup management space,” said Matt Hall, Bocada’s CEO. “Age-old backup monitoring challenges like environment complexity and data volume growth will continue to plague data protection professionals, all while they are expected to manage cloud transformations, cybersecurity, and automation initiatives. Unless they find solutions to centrally manage these moving pieces, critical data will be at risk.” To read the full report, visit:https://www.bocada.com/backup-monitoring-trends-report/ About Bocada Bocada delivers backup reporting and monitoring automation solutions for complete visibility into backup performance. The Bocada platform simplifies complex backup and storage oversight, allowing IT organizations to save time, reduce overhead costs, and decrease data protection risks. With the largest installed customer base in the Fortune 500, Bocada is the world’s leading provider of backup reporting automation.More information is available at www.bocada.com.Robert Nachbarrob@kismetcommunications.netRelated ImagesImage 1: Top Backup Operations Challenges Today Bar chart showing the top challenges facing backup operations professionals.This content was issued through the press release distribution service at Newswire.com.AttachmentTop Backup Operations Challenges Today

Design a site like this with WordPress.com
Get started