Andrew Rose

D

Why Ransomware Is an Ethical Concern for CISOs

DEC

It’s not strictly illegal to pay a ransom, and it’s inevitably tempting to view this as the easiest solution to an immediate problem. But as any philosopher will tell you, what’s legal isn’t always what’s ethical – and giving criminals what they want has repercussions that go way beyond your own four walls.

T

Hacktivism: how worried should organisations be?

The Guardian Jun

Hacktivist groups have been in existence for many years, however the iconic imagery and chilling propaganda messages of Anonymous mean that this loosely linked group of individuals are almost synonymous with the movement. Breaking through to mainstream attention with their support of Julian Assange's WikiLeaks programme, Anonymous rapidly rose to become a high-profile combatant in the fight for freedom of information and social justice, becoming associated with the 2011 Occupy movement, and being listed in Time magazine's 100 most influential.

I

Employees Can Create Major Security Headaches

Information Age Feb

The cyber security challenge is expanding for CISOs looking to protect their organisations.

In today’s security environment, cyber attackers or hackers have pivoted their focus towards the user. This, combined with the rise of remote working, caused by the outbreak of Covid-19, and the expanding definition of the insider threat, has created a number of new cyber security challenges that must be addressed.

I

Rethink your security education strategy to engage Generation Y

InfoSecurity Europe Oct

Any good HR professional will tell you that the recruitment of good talent is the difference between long term success and long term stagnation, or even failure, of your organisation. This has never been truer than now, in the midst of this digital age, as organisations compete to create the most compelling app, or embrace customer needs in new and innovative ways.

H

Cybersecurity Insurance Still Requires Cybersecurity

Huffington Post Aug

Might cybersecurity insurance be a viable solution? As reported in SC Magazine, Yes, says Hunton & Williams LLP. Cybersecurity insurance fixes the problems that these vulnerabilities cause—that technology alone can’t always mitigate.

B

4 Facts About Operation Emmental

Bank InfoSecurity Jul

Malware tied to the Operation Emmental attacks that have plagued bank customers in Switzerland and three other nations first surfaced in 2013. But variants of the malicious code only recently gained the ability to bypass SMS-based two-factor authentication systems, says security vendor Trend Micro.

W

Cybersecurity Spending Reflects Limited Shift in Priority

Wall Street Journal Jul

Security continues to take dollars from other IT spending categories, but it shouldn’t slight strategic initiatives meant to support revenue growth.

T

How the Internet of Things Could Kill You

Toms Guide Jul

The hyper-connected world of the "Internet of Things," may be convenient, efficient and cool, but it has a scary underside: An attack on connected devices is often an attack on the victim's physical space and being, and unlike regular hacking attacks could result in injury or death.

T

Companies need to embrace risk to win

The Financial Times Jun

If you give a company chief information security officer (CISO) 15 seconds to explain his (or her) job, you will probably hear some variation of “I protect the company’s brand.” But the best CISOs won’t stop there – they’ll describe their role as extending beyond brand protection and into helping their firms pursue new business opportunities safely.

C

AI will transform information security, but it won’t happen overnight

CSO Online Mar

Although it dates as far back as the 1950s, Artificial Intelligence (AI) is the hottest thing in technology today. An overarching term used to describe a set of technologies such as text-to-speech, natural language processing (NLP) and computer vision, AI essentially enables computers to do things normally done by people.

M

After Heartbleed, can Britain’s new Cyber Emergency Response Team beat the hackers?

Metro Newspaper Apr

If you’ve got a problem with your computer, it’s often the best way of fixing it – or so the folk that lurk in IT departments tell us. But that’s exactly what hackers did when they seized control of a water treatment plant in Illinois three years ago. They repeatedly turned the site’s computer system off and on again so quickly that they managed to break a vital pump, temporarily cutting off supplies of clean drinking water to thousands of homes.

M

Brands face reputation risk over Heartbleed for not contacting users directly

Marketing Week Apr

Brands implicated by the Heartbleed bug discovered earlier this week, which has left half a million sites vulnerable to leaking sensitive information about their users to hackers, are at risk from reputational damage by not communicating users directly to say they have been implicated.

R

11 cyber-crime lessons from the Target security breach

Retail Week Jan

Cyber-crime is big news at the moment - barely a day goes by without news of another huge security breach - and the Target hack in December was one of the biggest. Target’s recent hack has been a PR disaster for the US retailer - with 40 million credit card details stolen, customer confidence in the retailer is rock bottom.

C

CISOs must shape up or ship out, says Forrester

Computer Weekly Jun

Chief information security officers will have evolve into corporate information risk managers if they are to survive in the future, says Andrew Rose, principal analyst at Forrester Research.

W

Analyst: In ‘Internet of Things,’ security often takes a backseat to innovation

Washington Post Nov

Technologists’ vision of the “Internet of Things” — smartphones, appliances, cars and other devices transmitting data wirelessly — creates a need for secure, protected networks to facilitate that communication, one analyst says. A handful of tech companies have released software dedicated to protecting the Internet of Things. For instance, this week Verizon released a cloud-based software that verifies device identities before allowing them to access networks.

I

Ransomware 3.0 – Where the CISO’s most feared scenario goes next

IT Pro Portal Jan

Ask any CISO what keeps them awake at night and the answer is bound to be: ransomware. A proven money-maker for cybercriminals, ransomware can be devastating to your business – it can wipe out core operational systems; can cost you millions of dollars to recover from; can result in a stock downturn and job losses; and it should be entirely avoidable.

T

Internet of Things 'needs smarter security'

The Telegraph Jun

Whether it’s driverless cars, fridges that tweet you when you run out of milk, or thermostats that detect when you're on your way home and turn on the heating, interest is growing in the so-called ‘Internet of Things’. However, this new hyper-connected world is also exposing people to a greater risk than ever before, as not only does it mean a hacker could now access your data, they could also take control of your physical world.

T

Is it time for cyber liability insurance?

TechTarget Aug

A new cyber security study, Managing Cyber Security as a Business Risk: Cyber Insurance in the Digital Age, conducted independently by the Ponemon Institute and sponsored by Experian Data Breach Resolution, found that companies now view cyber security risks as outweighing natural disasters and other major business risks.

C

Bitcoin DDoS Attack Raises Doubts On Its Future

Cruxial CIO Feb

Hackers have hit the black market e-commerce site Silk Road 2 with a distributed denial-of-service attack (DDoS), stealing $2.7 million, or 474.27 bitcoins, and leading to concerns about the security of bitcoin technology.

B

Germany Said to Review ‘No-Spy’ Buying Rules Amid U.S. Row

Bloomberg Jul

Germany’s Interior Ministry is reviewing rules for awarding government contracts for computer and communications equipment and services as a political rift with the U.S. widens, people familiar with the matter said.

R

Preparing for the Internet of Things: Smart Devices Present New Security Challenges

Risk Management Managzine Feb

The internet of things (IoT) is the term technologists use to describe the growing use of embedded sensors in the machines around us, which are designed to facilitate data collection and analysis on a real-time basis. IoT technology will make this scenario a reality, along with a host of other new real-time services and processes.

P

Yahoo backtracks on Do Not Track

PC Pro May

Yahoo has dumped support for Do Not Track, citing a lack of a single standard used across the tech industry. Do Not Track (DNT) is an HTTP privacy setting that tells advertisers whether or not web users are happy to be tracked across websites. By default, DNT is turned off in most browsers, with people needing to opt in to receive any protection.

J

Air Traffic CISO Revamps Security Culture

Jun

The head of cybersecurity at The National Air Traffic Service (NATS) has proposed the need for behavioural change around cybersecurity among the air control organisation’s employees – and is drawing on Facebook research to drive the initiative.

S

UK government proposes public sector data sharing

SC Magazine Aug

A leaked document reveals that the British government plans to revise data collection laws so that it can share personal details on earnings, tax and criminal records, benefits payments and more with all agencies in the public sector.

C

CISOs will use higher budgets to address human error

Computing Feb

B

Java on XP: Take Your Chances

Bank InfoSecurity Jul

Warning for Windows XP users: Future Java updates may no longer be compatible with your operating system, because Oracle has stopped officially offering support for Java running on Windows XP.

C

Google I/O: Extending Google's enterprise reach

Computer Weekly Jul

Google has extended its enterprise apps portfolio with functionality that could make it a viable alternative to traditional enterprise software – especially for governments and in regulated industries, where data protection is key. During its I/O conference, Google unveiled Google Drive for Work and Android/Samsung Knox integration, which aims to boost security.

C

Four key areas for CIOs and CISOs to work together to meet business expectations

CIO Insight May

In order to meet today's market demands, the CIO needs a supporting team that's sympathetic to business challenges. CIOs are developing new skills to accommodate the disrupted nature of the modern enterprise. In a hyperconnected, always-on world, where the customer is king, CIOs have left pure technology skills behind and are now stretching themselves to become creative evangelists and strategic thinkers — people who can devise and deliver innovative new solutions that build business revenues rather than just support existing processes.

C

Rise Of The Machines

CNBC TV Sep

All around us, there's a technological revolution underway powered by devices as small as a grain of rice. They are sensors, capable of tracking and recording everything we do. They're in our smartphones, our cars, our appliances, even our bodies, and they're connected to the Internet to share information and make our world smarter. Virtually all products that use electricity – from toasters and coffeemakers to jet engines and MRIs – now have the ability to "talk" to each other, and to us. And, what they have to say is profoundly transforming our lives - the way we travel, treat disease, and enjoy our homes.

W

The Internet of Things Has Arrived — And So Have Massive Security Issues

Wired Magazine Jan

While not devoid of hype and hyperbole, the Internet of Things (IoT) does represent a revolution happening right now. Companies of all kinds – not just technology and telecommunications firms – are linking “things” as diverse as smartphones, cars and household appliances to industrial-strength sensors, each other and the internet. The technical result may be mundane features such as intercommunication and autonomous machine-to-machine (M2M) data transfer, but the potential benefits to lifestyles and businesses are huge.

But … with great opportunity comes great responsibility. Along with its conveniences, the IoT will unveil unprecedented security challenges: in data privacy, safety, governance and trust.

T

Ransomware Recovery Costs

TechCrunch Aug

E

Are Cyber-Security/Anti-Hacking Stocks the Next Bull Market?

Equitiescom Aug

The Financial Times, citing a global watchdog, recently reported about the rising danger of cyber-attacks on financial markets. According to Greg Medcraft, Chairman of the Board of the International Organization of Securities Commissions (IOSCO), the next major financial shock will come from cyber space.

I

Technical Skills Not Important for Future CISOs Declares Forrester

InfoSecurity US Jun

In a session titled ‘Becoming the Future CISO’ at the Forrester Forum for CIO’s in London, England, June 6 2013, Andrew Rose declared the current role of CISO a dying breed.

W

CIOs Make Tough Calls on the Cost of Cyber Security

Wall Street Journal Jan

As IT security becomes a strategic level concern, CIOs are being called on to make tough decisions on cost and benefit, Andrew Rose, a Forrester Research analyst said. “It’s moving from an information security guy who may be very comfortable talking about firewalls. Now he has to stand up and describe a three year plan, which can be pretty intimidating.”

About

Detail

Timeline

Résumé

Andrew Rose

About

Detail

Behavioral traits