Content by Anna Delaney

Getting the Most From Information Security Investments

Anna Delaney  •  June 24, 2020

Greg van der Gaast, head of information security at the University of Salford in the United Kingdom, has strong opinions on why some security investments aren't reaping maximum benefits. "We are addressing problems too far downstream," he says.

The Remote Workforce: Cloud Security Challenges

Anna Delaney  •  June 23, 2020

As a result of the rapid move to a remote workforce, now is a golden opportunity to refine cybersecurity approaches - especially for the cloud, says Christian Toon, CISO at the international law firm, Pinsent Masons.

When Offices Reopen, Will Security Incidents Be Discovered?

Anna Delaney  •  June 19, 2020

When organizations eventually allow employees to return to their offices after the COVID-19 crisis subsides, they may discover "more network intrusions, data exfiltration and data breaches," says U.K. cybercrime expert Andrew Gould, who implores organizations to report these incidents to authorities.

How to Measure and Communicate the Value of Your Security Program

Anna Delaney  •  June 18, 2020

Measuring and communicating the value of a cybersecurity program is more important than ever. Colin O'Connor, COO of ReliaQuest, previews the topic for an upcoming virtual roundtable.

Rethinking Risk for the Remote Workforce

Anna Delaney  •  June 17, 2020

Despite the rapid shift to a work-from-home environment, business continuity and resiliency thrived. Does this mean security teams were focused on the right risks all along? Perhaps in part, but gaps still need to be addressed, says Quentyn Taylor, director of information security for EMEA at Canon.

Unilever CISO on Security Priorities for Remote Workforce

Anna Delaney  •  June 5, 2020

Bobby Ford, CISO of Unilever, a multinational consumer goods firm, says the shift to a work-from-home environment requires an intensified focus on email security as well as identity and access management.

How Fraudsters Search for Victims Online

Anna Delaney  •  June 4, 2020

Mark Johnson, chair of The Risk Management Group, demonstrates techniques that fraudsters use to search for victims online and describes ways to detect fraud schemes.

Building a Corporate Culture That Values Cybersecurity

Anna Delaney  •  June 2, 2020

Corporate culture can have a big impact on an organization's ability to achieve cybersecurity objectives, says Jessica Barker, chair of ClubCISO, a private members forum for European information security leaders, who provides insights on gauging an organization's security maturity.

How Smaller Companies Can Set Cybersecurity Priorities

Anna Delaney  •  May 28, 2020

Small and midsize companies don't need to spend money on expensive security products, says cybersecurity consultant Nic Miller, but they must consider several critical factors as they devise their strategies.

Why an Information Asset Register Plays Important Role

Anna Delaney  •  May 26, 2020

Security practitioners need to know what data their organization has and where it is kept so they can ensure it's protected. That inventory process that can be simplified by creating an information asset register, says Bilal Ghafoor, a data protection consultant.

Setting IAM Priorities in the Shift to the Cloud

Anna Delaney  •  May 26, 2020

As more organizations rely more heavily on cloud-based applications as a result of a remote workforce, they must avoid taking identity and access management shortcuts, says James Gosnold of the cloud consultancy CloudKubed, who calls for the addition of another layer of authentication.

How CISOs Can Achieve Better Network Visibility

Anna Delaney  •  May 20, 2020

To achieve better network visibility, security practitioners must improve their knowledge of tools that support web services, containers and the evolution of development practices, says Ed Moyle, co-founder of the cybersecurity advisory firm Security Curve.

The Urgency of Re-Examining Security Practices During Pandemic

Anna Delaney  •  May 15, 2020

Organizations must carefully re-examine their security procedures to make sure they're adequate for the new work-from-home environment during the COVID-19 crisis, says Shelton Newsham, a British law enforcement official who specializes in cybersecurity. He reviews key questions to ask.

Cybersecurity Education for the Remote Workforce

Anna Delaney  •  May 13, 2020

In the current work-at-home environment, keeping the workforce educated about critical cybersecurity practices requires "short, sharp bursts of education" that offer compelling messages, says Vicki Gavin, a former CISO who now serves as a cyber education consultant.