Time for some big ideas.
Runtime looks at how challenging the CISO role is. CISOs often need more organizational power and report to CIOs or CFOs, limiting their ability to make changes for better security. Despite this, they are the ones held accountable when incidents occur. Legal pressure on CISOs is expected to rise, especially with the increase in ransomware attacks. The government is considering imposing cybersecurity standards on hospitals and entities receiving money from Medicare and Medicaid. CISOs are concerned that their good-faith attempts to secure their corporations could be used against them. Clear documentation of roles and responsibilities and specifying legal responsibility for cybersecurity incidents is necessary.
All this AI talk – Data needs to come first. From ZDNet, Generative AI can potentially transform customer experiences, but its implementation requires focusing on other areas first. Forrester predicts AI-powered tools will enhance customer service by providing natural language question-answering capabilities. Businesses like MHR and Simplyhealth are already leveraging AI to improve CX. However, professionals must carefully consider the purpose and outcomes they aim to achieve with AI-enabled solutions and be aware of the limitations and potential risks associated with the technology.
Dark Reading asks, “Is CISA’s Secure by Design Pledge Toothless?” Although voluntary and lacking legal binding, CISA’s Secure by Design pledge aims to incentivize good security practices and investments across industries. The pledge focuses on multi-factor authentication, default passwords, vulnerability reduction, security patches, and more. While it may not have direct authority, it sets expectations and could influence public-private partnerships and tech buyers’ decisions. The pledge reframes the conversation around fundamental security issues and encourages a more expansive view of risk beyond just vulnerabilities.
And last week, I mentioned that fun Portal between Dublin and New York City. It has been temporarily closed due to inappropriate behavior. While some used the portal to share positive moments and connect with loved ones, others engaged in flashing, showing pornographic videos, and mocking 9/11. The proposed solution of blurring images held up to the camera was deemed unsatisfactory, and the team behind the portal is now investigating other technical solutions. The portal will be reopened shortly after the necessary changes are implemented.
Why do we care?
Beyond the quip of “This is why we can’t have nice things,” it should have been evident that users would abuse the system. But I’ll admit, I didn’t think of it either. Were you with me?
Delivering CISO services is challenging. This is an intensely obvious statement.. and essential because many software vendors encourage providers to deliver them. Do you know what you’re getting into? AI, too, and the opportunity for data management is apparent.
I’ve given you big, complex problems to chew on because complicated problems are also profitable ones. Just don’t forget they are hard.