Content by Anna Delaney

Why Identity Is Key to Baselining API Security Programs

Anna Delaney  •  May 31, 2023

Change management is a critical part of a robust API management program, said Shaam Farooq, vice president of technology at Atlas Energy Solutions and a CyberEdBoard member. Team members must review and approve changes as they happen and communicates those changes across IT and OT security teams.

ISMG Editors: How Ukraine's Cyber Defenders Prepped for War

Anna Delaney  •  May 26, 2023

In the latest weekly update, ISMG editors discuss top takeaways from Ukraine's cyber defense success, how a European regulator suspended Facebook data transfers to the United States, and the state of the EU General Data Protection Regulation on its five-year anniversary.

5 Years of GDPR: Criticism Outweighs Positive Impact

Akshaya Asokan , Anna Delaney  •  May 25, 2023

Five years after the effective date of the General Data Protection Regulation, the European Union privacy law - hailed as a way to protect the privacy of citizens in an increasingly digital world - continues to be marred by criticism over its lack of effectiveness and uneven implementation.

ISMG Editors: The Plot Thickens for Capita in Breach Fallout

Anna Delaney  •  May 19, 2023

In the latest weekly update, four ISMG editors discuss the mounting fallout from the March hack of Capita and accompanying data breach, the comprehensive crypto regulation adopted by the EU, and Crosspoint Capital's agreement to purchase Absolute Software for $657 million.

What the Uber-Joe Sullivan Case Means for CISO Liability

Anna Delaney  •  May 15, 2023

Former chief security officer Joe Sullivan avoided jail time for his role in impeding a federal investigation into Uber's security practices, but attorney Lisa Sotto of Hunton Andrews Kurth LLP warned security leaders and executives "to take heed" and ensure they are covered for personal liability.

Why 'Shift Left' Leads to Unrealistic Security Expectations

Anna Delaney  •  May 15, 2023

The "shift left" movement puts "unrealistic" expectations on developers, said Gayatri Prakash, vice president and general manager of compliance at CloudBees. She said installing new tools to manage various parts of the SDLC is not necessarily "going to solve our problem for security."

Editors Panel: How Feds Hacked Russia's 'Snake' Operation

Anna Delaney  •  May 12, 2023

In the latest weekly update, ISMG editors discuss how the Feds have dismembered Russia's 'Snake' cyberespionage operation; the ongoing debate over privacy laws and regulations in the APAC region; and why more companies are banning the use of generative AI tool ChatGPT.

Treasury Department Targets Cloud Risks for Financial Firms

Anna Delaney  •  May 9, 2023

What are the challenges facing the U.S. financial sector as it continues its enthusiastic embrace of cloud-based technology? Department of the Treasury Deputy Assistant Secretary Todd Conklin said the agency has been "doing the best we can to secure cloud" as firms increasingly adopt it.

Dispelling Misconceptions About Cyber Gamification

Anna Delaney  •  May 8, 2023

Gamification in cybersecurity can bring great potential business value to many organizations, but security teams need to dispel some misconceptions. In the first place, it’s not a game that takes employees away from their jobs, said Joe Carson, chief security scientist and advisory CISO at Delinea.

Security Controls Cyber Insurers Are Looking for These Days

Anna Delaney  •  May 8, 2023

Most people would assume ransomware tops the list of cyber insurance claims. Not so these days. Most claims are originating from third-party attacks, said Peter Hedberg of Corvus Insurance and Christopher J. Seusing of law firm Wood Smith Henning & Berman.

Rolling Out the Passwordless Future

Anna Delaney  •  May 8, 2023

Humans continue to reuse simple passwords that criminals can access, and passwordless continues to be the way forward. Jeff Shiner, CEO of 1Password, said we're making progress toward the future of authentication - passkeys - and discussed when, why and how to adopt them.

New Approaches to Solving the Cybersecurity Talent Shortage

Anna Delaney  •  May 8, 2023

The ever-expanding threat landscape and the continued talent shortage mean defenders increasingly need to be ready with the skilled talent to face the onslaught of cybercriminals who are gaining momentum by employing new tactics, according to Pamela Nigro, ISACA board chair.

Helping Small and Midsized Businesses Improve Their Security

Anna Delaney  •  May 7, 2023

Many small and medium-sized businesses are facing "generational trauma" in trying to comply with a variety of regulatory and other compliance issues as these requirements are being demanded by their larger business partners, insurers and others, says Tarah M. Wheeler, CEO of Red Queen Dynamics Inc.

The Current Landscape for Cybersecurity Innovation

Anna Delaney  •  May 7, 2023

Despite recent unstable market conditions, the cybersecurity market is growing, said Saj Huq of Plexal, a cyber innovation accelerator based in the U.K. and innovation partner of the National Cyber Security Centre, which is part of the U.K.'s intelligence, security and cyber agency.

The Evolution of Identity Verification

Anna Delaney  •  May 7, 2023

In the online world, knowing and trusting who you are interacting with has been a problem for decades. When it comes to assessing the state of identity verification, "we certainly have a lot of problems to address," according to identity expert Jeremy Grant of Venable.