7th Annual e-Crime & Cybersecurity Congress Nordics
24th May 2022 • 7A Odenplan • Stockholm, Sweden
Can anyone prove they’re secure?
Everyone is a third party. So, if businesses will increasingly only work with the cybersecure, how can you prove you are? Especially if your third parties aren’t…..
Cybersecurity re-imagined
It has been clear for some time that the current model we use to try to keep organisations and individuals safe from cyberattack is flawed. It’s not just that the traditional perimeter no longer exists, it’s also that what is simplistically called ‘basic cyber hygiene’ is almost impossible to guarantee. As ransomware has taught us, if you combine the inherent insecurity of the legacy web, ubiquitous work applications and software based on open source libraries, with the continued inability of either technology or users to mitigate the problem of email-based malware attacks, then you create a situation in which sophisticated criminals are able to exfiltrate or corrupt valuable data almost at will.
In the Nordics region, attacks have continued to get through. So at the beginning of the year Norwegian media company Amedia suffered a cyber attack that shut down its computer systems, preventing the company from printing newspapers and operating its businesses. The incident was the third high-profile cyber attack to affect companies in Norway. On December 21, food giant Nortura announced that it had shut down IT systems in several factories and was focusing on minimizing damage after detecting a cyber attack.
In addition, there is an ongoing question about the cost of the cybersecurity stacks required to provide even partial protection. A recently revealed cyberattack on the UK’s Foreign, Commonwealth & Development Office (FCDO) cost £467,325.60 for “business analyst and technical architect support to analyse an authority cyber security incident” that concluded January 12 2022.
For most organisations spending that amount of money on one incident would be at best annoying and at worst unaffordable, particularly if they were already paying for a security stack, external pen testing, consultancy and everything else that goes with maintaining effective cybersecurity.
It is noticeable how little vendors talk about costs versus how much CISOs talk about resources. Is it time for a more open discussion about what an affordable security stack looks like, what affordable means for different types of organisations and what level of spend gets you what level of security and data privacy?
So how can vendors, governments and CISOs work together to build a better model for cybersecurity? Is zero trust the answer and if so is it possible? These are just some of the topics we will discuss at the e-Crime & Cybersecurity Congress Nordics.
