Content by Tom Field

'Stronger Together' - Preview of RSA Conference 2023

Tom Field  •  March 28, 2023

"Stronger Together" is the theme of RSA Conference 2023. In an exclusive preview of the event, Linda Gray Martin and Britta Glade explain why that theme was selected - and what attendees can expect to see from sessions, speakers and sponsors when they attend the annual gathering in San Francisco.

Former US CISO on New US Cybersecurity Strategy: 'It's Bold'

Tom Field  •  March 2, 2023

Retired Air Force Gen. Gregory Touhill, the very first U.S. federal CISO back in the Obama administration, says he's encouraged by the new U.S. National Cybersecurity Strategy. His top takeaway: the shift of cybersecurity responsibility from consumers to manufacturers of vulnerable products.

Tom Kellermann: 'This Is a True Strategy'

Tom Field  •  March 2, 2023

Tom Kellermann has never tempered his criticism of U.S. cybersecurity policies. But he is openly enthusiastic about the National Cybersecurity Strategy unveiled March 2. "I was blown away," Kellermann says about the Biden administration's new five-pillar policy. "Seriously, this is a true strategy."

eBook: 6 Critical Capabilities for an Application GRC Solution

With application GRC more critical than ever in today's dynamic, dispersed environment, what are the critical capabilities needed in a solution? Keri Bowman of Saviynt offers six recommendations, including risk reporting and out-of-the-box rule sets and compliance management. In a video interview with Information...

Evolution of Attack Surface Management

Tom Field  •  February 27, 2023

Hybrid workforces, connected devices, the proliferation of apps - We're all aware of how the attack surface has evolved dramatically over the past three years. How can defenders hope to keep pace with this rate of change? Jake Reynolds of NetSPI discusses the evolution of attack surface management.

Top 5 Reasons to Use MDR in Public Sector

Tom Field  •  February 22, 2023

Gartner says by 2025, 50% of companies will be using MDR. What's the compelling business case, and how does it translate to meet the needs of public sector entities? Rob Lalumondier of Sophos shares five reasons to use MDR, as well as key questions to ask when selecting a provider.

Making the Case for Endpoint Backup

Tom Field  •  February 17, 2023

Endpoint detection and response is a great defense - but not entirely enough to protect all data in the event of a devastating cyberattack. Enter endpoint backups, which provide extra levels of resiliency, recovery and compliance, says Mason Swenson of CrashPlan.

2023 Cyber Bank Heists Report: The Rise of Punitive Attacks

Tom Field  •  February 10, 2023

Banking Trojans, ransomware, fake finance apps programmed to steal data - the cybercriminal cartels have become more punitive in 2023, escalating destructive attacks on financial institutions. This is just one key finding of the annual Cyber Bank Heists report by Contrast Security's Tom Kellermann.

Venture Capitalist: Now Is an Ideal Time to Invest in Cyber

Tom Field  •  January 26, 2023

Valuations are down, some companies have left the market altogether, and some even have announced deep rounds of layoffs. Yet, Alberto Yépez of Forgepoint Capital retains optimism for the cybersecurity marketplace in 2023 and says now is the ideal time to be ramping up investments in innovation.

Case Study: Policy Compliance With Layered Security

Tom Field  •  January 25, 2023

Many enterprises want to move away from basic security configuration assessment tools that monitor for CIS controls but don’t have automated remediation or custom reporting. Beatrice Sirchis of Israel Discount Bank of New York shares her perspective on policy compliance beyond SCA.

Profiles in Leadership: Aleksandr Zhuk

Tom Field  •  January 24, 2023

As a veteran CISO who enjoys the startup culture and energy, Aleksandr Zhuk of crypto broker sFOX likens himself to the first family doctor coming to a growing village. He's addressing an important need that certainly existed prior, but was overlooked or maybe outsourced.

Managing the Risk of Ransomware in the Digital Supply Chain

Tom Field  •  January 19, 2023

RiskRecon recently studied the impact of destructive ransomware incidents and the unique tie between ransomware susceptibility and an organization's cybersecurity posture. Kelly White of RiskRecon discusses the findings and how to use them to help secure the digital supply chain.

Quarterly Threat Report: The Risk of MFA Fatigue

Tom Field  •  December 30, 2022

Expel has released its latest quarterly threat report, which looks at continued identity-based attacks and the impact of MFA fatigue. Jon Hencinski shares insights on attack trends, gaps in compensating controls and what to look for in pre-ransomware activity.

Zoom CISO's 2023 Cybersecurity Predictions

Tom Field  •  December 30, 2022

Phishing and other socially-engineered schemes are going to get bolder, the attack surface is only going to get bigger, and enterprises everywhere are going to have to focus more on building cyber resilience. These are among the New Year's predictions from Zoom's new CISO, Michael Adams.

Johnson & Johnson CISO Marene Allison to Retire

Tom Field  •  December 23, 2022

She has been a CISO almost longer than there has been cybersecurity. And now Marene Allison, CISO at Johnson & Johnson, eyes retirement and her next adventures. She reflects on her career, her accomplishments and what she wishes for her successor and the next generation of cybersecurity leaders.