Roger Halbheer on Security
As you might know, I am part of the Cybersecurity Advisory Board of the Swiss Academy of Engineering Sciences here in Switzerland. In this capacity I had the opportunity to publish an article at Inside IT: SATW insights: Zero Trust – Sicherheit in Zeiten von Homeoffice (in German).
Enjoy!
We talked about this very often so far: Passwords are by far the weakest link when it comes to security today. 81% of successful attacks involve lost, breached or re-used passwords. There is another fairly current article mentioning that, even when it comes to industrial espionage in the times of COVID-19: State-linked hacking continues amid…
This week we will run a webinar as a follow up to a blog post: the Alternative ways for security professionals and IT to achieve modern security controls in today’s unique remote work scenarios These webinars will take place: Session 1: Tuesday, March 31, 2020 9:00 AM Pacific Time Session 2:Tuesday, March 31, 2020 6:00…
As a lot of companies migrated to Microsoft Teams to enable all the Home Office scenarios, there is a good chance that certain things cooled down a bit on the end of the IT department. It might be time to look at security and compliance in Microsoft Teams as well. Matt Soseman, a Security Architect…
There is plenty of information out there how to secure a “Home Office” environment in these days and I do not want this to be another one. However, I tried to compile a few resources, which might help you overcome some of the current challenges: VPN Shortage Quite some customers initially decided to route their…
It is not the first time I am talking about Zero Trust here. And often it is absolutely clear to the customers that the next perimeter is the identity and not necessarily the network to the same extent anymore. Read this article: More Than 99% of Cyberattacks Need Victims’ Help – the network protection will…
This is not fundamentally new but the figure is really high…
So, why are you still using username/password?
This is a questions I get fairly often. But before I try to answer, let’s take a step back: We know that attackers typically try to compromise user accounts and then move laterally until they find higher-value credentials. The holy grail in this movement is typically and administrator who uses his admin account to surf…
That’s not a bad start of the day, reading such a headline from a Forrester analyst. I am often asked, how far we are going to drive security within Microsoft. Well, I guess here you have an answer from an outsider: Make No Mistake — Microsoft Is A Security Company Now. Even though the author…
The feature for Live has been there for a while but certain announcements on out side now really caught track. I use my Microsoft Account without passwords since quite a while and it is really cool. The same comes for the business with FIDO 2.0. So you should see the news: CNBC: Microsoft announces it…
We had a meeting today between a customer and our CISO, Bret Arsenault. As always Bret was giving a lot of insights into his world and he was talking about our cloud transformation. Obviously, there was a time, where our migration stalled, and they were trying to figure out, why. He then learned from somebody,…
I was just reading an article called Does Facebook even need a CSO? – initially my reaction was (as most of yours I guess): “What a stupid question, for sure we need a CSO”. However, is this true? Do we really need a CSO? Are there other models which would work as well? What is…
It is not new, that identity will become your new perimeter, your next control pane. Still I see a lot of companies struggle with the concept and with the feeling to have the identity in the Cloud. Often, I hear the statement that they “lose control” once the identity is (at least partly) managed in…
It is in my opinion a controversial discussion: Do you allow the use of USB sticks in a corporate environment and if yes, how? Obviously, today there are a lot of other means to exchange information but the USB stick still seems to be important for users. To have a presentation for an event on…
I have seen different talks by Simon Sinek and I have to admit, I really like him. I just recently found a TED Talk by him on leadership. He had a few really remarkable quotes on leadership: In military, they give medals to people who sacrifice themselves so others may gain. In business, we give…
Well, another one: CIO or C-Suite: To Whom Should the CISO Report?
At least the security community seems to agree…
I am in this business for almost two decades, which is frightening by itself. On the other hand, it is absolutely fascinating, how the security industry and especially the role of the CSO changed. I do not want to go into long stories of security itself but look at it: Initially it was all about…
A lot of people just throw away their boarding pass after a flight. I mean, what information do you find on it? Name, seat, date and flight. So what? You can find this information for a lot of people on social media anyway, right? Well, not really. There is other information on it as well…
We always talk about it, right? Security is a top management responsibility but who is really taking this responsibility? Typically the CSO gets under pressure, once incidents happen. Well, Marissa Mayer – the CEO of Yahoo – does, now: Yahoo CEO Loses Bonus Over Security Lapses And with GDPR just around the corner with fines…
One of the discussions I have with a lot of customers is around managed security services. Especially themes like Security Operation Centers seem to be fairly emotional as quite some customers want to build and run one themselves (and yes, I know the challenges around regulation). One of the points I often make is the…
