Access your Pro+ Content below.
High alert on cyber risk and cybersecurity preparedness
This article is part of the June 2014 Vol. 16 / No. 5 issue of Information Security magazine
The call for immediate actions to address cybersecurity is reaching the top levels of global organizations. Cyber risk jumped from 12th to 3rd place in Lloyd's Risk Index 2013, which polled 588 C-level executives and board members at multinationals in April and May of last year. The top five concerns were high taxation, loss of customers, cyber risk, price of material inputs and excessively strict regulation. As discussions about cyber risk heat up boardrooms, are global organizations spending more on cybersecurity? And are they investing in the right security controls? "My CIO asked me that same question last week," said George Do, global information director at Equinix, an International Business Exchange data center and colocation provider, with operations in 15 countries. The problem is no one in information security can really answer these questions. Cyber risk remains a challenging calculation because information sharing about the cost of data breaches is limited, and the InfoSec industry can't agree on how well security ...
Features in this issue
Learn how threat intelligence plays into global risk assessment as more security officers are tasked with damage control.
As threat intelligence communities multiply, it may be time to revisit crowdsourcing security.
Are there shadow networks within your enterprise? Stop malware by shutting down command-and-control communication channels.
This Beyond the Page explores the latest advances in threat intelligence and related technology, including threat information sharing services, SIEM and endpoint security products.
Columns in this issue
Threat intelligence can shine a light on important security holes.
Medical data is the next frontier, Avi Rubin tells Marcus Ranum, as Johns Hopkins University seeks to insulate medical information systems from hackers.
How to evaluate whether PCI DSS is lowering credit card fraud and the risks associated with data breach disclosure.