More attacks, more regulation, more investment needed
30th October 2024 • Marriott Hotel, Copenhagen, Denmark
Denmark is at the frontline: organisations have to raise their cybersecurity game to reflect that
Is your cybersecurity operation good value for money?
In April, the Danish Centre for Cyber Security (CFCS) raised its threat level assessment for destructive cyber-attacks against Denmark to three on a five-level scale. To underscore the seriousness of the threat, this message was delivered by Defence Minister Troels Lund Poulsen.
This "middle" level implies that there are one or more actors with intention and capacity for attacks or harmful activity, but no indications of any specific plans for such activity, according to the CFCS.
Denmark had already had a taste of the new era in cyber aggression in 2023 when 22 firms, many in CNI sectors, were attacked, some by Russian hackers but some by a different wave of attacks exploiting unpatched firewalls.
The increased level of threat is just a reminder that companies need to look at how they organise their cybersecurity processes and technology to meet the challenge in a financially sustainable way.
Boards and other stakeholders now understand the value of good cybersecurity. Ratings agencies, share- and bond-holders and regulators are driving that home. The Euronext cyber index shows just how much good security can boost performance.
But Boards also want value for money from their security teams.
They don’t necessarily need a hard and fast ROI number, but they want to know that technology is not being duplicated, that the solutions chosen are the most effective, that core components such as E5 licences are being fully utilised and that new technology like AI is being used carefully as an overlay rather than requiring legacy systems to be ripped out.
And, of course, they want assurances that basic cyber hygiene is being carried out.
So, what should Boards, risk officers and cybersecurity professionals be doing? Where should you be investing – cloud, network hardware protection, server-level DDoS protection, better network data analytics? What other mitigations can you put in place?
Come to the e-Crime & Cybersecurity Congress Nordics to find out:
• How your fellow cybersecurity professionals are coping with these challenges day-to-day?
• Does NIS2 help and what must you do to incorporate its requirements?
• What practical steps you can take to get better supplier visibility and understanding?
• How to economically enhance the security built into Cloud infrastructure and applications with
selected additional technologies.
• How new and not-so-new EU Directives are driving the Board view of cybersecurity risk and
investment.