Reporting on Key Issues in Cybersecurity: Panel Discussion with Renowned EMEA Reporters

Last week, FireEye held a panel podcast featuring renowned reporters covering Europe in advance of the highly anticipated Infosecurity Europe conference.

The panel includes reporters from some of the most credible publications covering information security, including Eleanor Dallaway from Infosecurity Magazine, John Leyden from The Register, Tom Brewster, a freelance journalist for TechWeek Europe and Guardian, and Dan Raywood, editor of IT Security Guru.

In the podcast the panelists discuss key issues in cybersecurity today, including the recent Heartbleed controversy. They also touch on why Infosecurity Europe is crucial for the information security community, and hint at what we can expect from the big event.

To listen to the full podcast, click here.

Security Is Like Eating An Elephant

Today’s security environment is daunting. If it’s not advanced persistent threat (APT) actors compromising data systems, it’s good old human fallibility. Protecting IT assets can make a security professional feel like a modern-day Sisyphus, staring helplessly as the boulder breaks free and rolls back to the bottom of the hill.

In a recent article, the UK Information Commissioner’s Office (ICO) proclaimed that the majority of data breach incidents can be attributed to staff carelessness. Continue reading »

Cyber Insurance – the Chicken and the Egg

Today, one of the most common discussions I have is “How do I qualify the cyber security risk to my board?” The security industry is very good at being able to define the type and scale of threats active today, and indeed with projects such as CISP, companies are starting to share intelligence with each other about the attributes of real time attacks they are seeing. Yet, we still have a major hurdle to tackle, which is the business impact that comes from incidents. While we continue to see any breach as a failure we will continue to keep the business impact of an attack a closely guarded secret. Legislation, such as the disclosure laws in the U.S. (which the EU is looking to repeat at some level in the proposed Network and Information Security directive) mandate the disclosure of what personally identifiable data was taken, yet this is not the impact, simply one of the potential catalysts of impact. Continue reading »