by Mark Hathaway
Telecoms providers operate some of the most complex IT environments in the world. As a result, the services they provide and the data handle for customers makes them a major target for multiple types of threat actor.
Now there’s an added incentive to improve resilience and visibility into such threats: the new UK Telecommunications Security Act, which will mandate improvements in baseline security. But providers looking to develop a compliance strategy must first understand the nature of the threat landscape.
by Bharat Mistry
Humans are addicted to stories. But sometimes the stories we tell are overly simplistic. In cybersecurity, a recurring narrative is one of C-suite executives perpetually at odds with IT leaders. They’re disinterested in what the security team does, and release funds begrudgingly and often reactively once a serious incident has occurred. This leads to mounting cyber risk, and an increasing likelihood that the organisation will suffer serious reputational and financial damage stemming from future incidents—or so the story goes.
In reality, things are more nuanced, as new Trend Micro research reveals. And they’re far from beyond the point of repair. But closer IT-board engagement is a must if these organisations are to avoid the mistakes of the past and build a security-by-design culture that permeates enterprise-wide.
Digital means risk
We all know the story of the past two years. Mass digital investments in SaaS collaboration suites, cloud infrastructure and other tools helped to keep organisations operational when they needed it most. The money continues to flow today, as those same companies realise they must keep on pumping funds into digital to stay competitive amidst rising customer expectations. Gartner predicted public cloud spending growth would hit 23% year-on-year in 2021 and increase 20% this year to top $397bn.
From a cybersecurity perspective, these business decisions are loaded with risk if protections are not built into projects from the start. Our recent global poll revealed that of 90% of business and IT decision makers are concerned about the impact of ransomware. It also found generally poor levels of cyber-awareness among board members. Less than half (46%) of respondents claimed concepts like “cyber risk” and “cyber risk management” were known extensively in their organisation.
The landscape is changing fast
Yet things are not as bad as they seem at first glance. The largest group of organizations (42%) claimed they spend most funds on tackling cyber-attacks, rather than the usual business suspects of digital transformation (36%) and workforce transformation (27%). Half claimed they’d recently invested in mitigating the risk of ransomware attacks and breaches.
by Mark Hathaway
Telecoms providers operate a vast ecosystem of critical infrastructure, stretching from base stations to virtual instances. New legislation in the UK aims to improve baseline cybersecurity, remove high-risk vendors from supply chains and limit the damage from breaches.
With penalties for non-compliance of up to 10% of turnover or £100,000 per day, there’s no time to delay. A new Trend Micro guide has some useful advice for communication service providers (CSPs).
by Bharat Mistry
There’s always been friction at the heart of the relationship between IT and the business. It’s particularly acute in the sphere of cyber, where the security function has long been regarded with suspicion as a block on innovation and productivity. However, the chasm between both sides has rarely been this wide. Nor have the repercussions of miscommunication and mistrust been so potentially catastrophic. A new Trend Micro study lays bare the scale of the problem, and offers some advice on how to tackle it.
To build the security-by-design culture that modern organisations need, security must be formalised, and embedded into every business process.