Tag Archives: IT security

Why the pace of cyber change is racing ahead of boardroom engagement 

by Bharat Mistry

Humans are addicted to stories. But sometimes the stories we tell are overly simplistic. In cybersecurity, a recurring narrative is one of C-suite executives perpetually at odds with IT leaders. They’re disinterested in what the security team does, and release funds begrudgingly and often reactively once a serious incident has occurred. This leads to mounting cyber risk, and an increasing likelihood that the organisation will suffer serious reputational and financial damage stemming from future incidents—or so the story goes.

In reality, things are more nuanced, as new Trend Micro research reveals. And they’re far from beyond the point of repair. But closer IT-board engagement is a must if these organisations are to avoid the mistakes of the past and build a security-by-design culture that permeates enterprise-wide.

Digital means risk
We all know the story of the past two years. Mass digital investments in SaaS collaboration suites, cloud infrastructure and other tools helped to keep organisations operational when they needed it most. The money continues to flow today, as those same companies realise they must keep on pumping funds into digital to stay competitive amidst rising customer expectations. Gartner predicted public cloud spending growth would hit 23% year-on-year in 2021 and increase 20% this year to top $397bn.

From a cybersecurity perspective, these business decisions are loaded with risk if protections are not built into projects from the start. Our recent global poll revealed that of 90% of business and IT decision makers are concerned about the impact of ransomware. It also found generally poor levels of cyber-awareness among board members. Less than half (46%) of respondents claimed concepts like “cyber risk” and “cyber risk management” were known extensively in their organisation. 

The landscape is changing fast
Yet things are not as bad as they seem at first glance. The largest group of organizations (42%) claimed they spend most funds on tackling cyber-attacks, rather than the usual business suspects of digital transformation (36%) and workforce transformation (27%). Half claimed they’d recently invested in mitigating the risk of ransomware attacks and breaches.

Continue reading

It’s time to get ready for the UK Telecommunications Security Act 2021

by Mark Hathaway

Telecoms providers operate a vast ecosystem of critical infrastructure, stretching from base stations to virtual instances. New legislation in the UK aims to improve baseline cybersecurity, remove high-risk vendors from supply chains and limit the damage from breaches.

With penalties for non-compliance of up to 10% of turnover or £100,000 per day, there’s no time to delay. A new Trend Micro guide has some useful advice for communication service providers (CSPs).

Continue reading

What will retail security look like in 2030?

by Olivia Edwards

The COVID-19 pandemic has made us all online shoppers. But the rest of the decade will see innovation on a far greater scale and across all channels. That’s going to be great for shoppers. And it will offer retailers previously untapped opportunities to drive operational efficiencies, improve the reliability of supply chains and optimise the customer experience. But while greater profits and burnished brand reputation await, so does cyber risk. 

No single vendor will hold the answers, but by anticipating what retail might look like in 2030, organisations can at least get a head start on planning for the future.

Continue reading

Welcoming the government’s latest proposals for strengthening UK cyber-resilience

by Michael Power

At Trend Micro we’re on the front line in the fight against threat actors. We see every day the ingenuity and determination of these adversaries. That’s why governments must lead from the front by raising the bar of baseline security standards, especially for providers of critical services.

So we’re delighted to see new proposals for updating the UK’s Network and Information Systems (NIS) Regulations 2018 to something fit for the modern digital age.

Continue reading