Content by Anna Delaney

NIS2 Directive: Focusing on Critical Infrastructure Security

Anna Delaney  •  August 29, 2024

The NIS2 Directive focuses on addressing gaps and strengthening the security of network and information systems across the European Union. NIS2 mandates rapid incident reporting and holds senior management accountable for cybersecurity, shifting responsibilities to the board level.

Fighting Back Against Double Extortion and Data Exfiltration

Anna Delaney  •  May 6, 2024

Sheetal Venkatesh, senior director, product management, Cohesity, and Steve Grossenbacher, director, product marketing, Zscaler, discuss double-extortion ransomware, Cohesity and Zscaler's collaboration, and the power of AI-driven solutions for sensitive data protection.

Strengthening Cyber Resilience: Tackling Threats and Gaps

Anna Delaney  •  May 6, 2024

Organizations are facing a critical imperative: strengthening their cyber resilience. Brian Spanswick of Cohesity and Tom Gillis of Cisco share insights into the evolving landscape of cyberattacks and the proactive measures being taken to combat them.

The Path to Managing AI Ethically - and Achieving ISO 42001

Anna Delaney  •  February 26, 2024

In late 2023, the debut of ISO/IEC 42001 marked a major advance in AI standards, offering a systematic framework for AI management. Avani Desai of Schellman sees it as a "paradigm shift" that emphasizes managing AI-specific risks that are distinctly different from traditional concerns.

AI Governance: Legal Risks and Compliance Challenges

Anna Delaney  •  January 19, 2024

Generative AI, once a buzzword, is now the subject of a focused approach, according to attorney Edward Machin of Ropes & Gray LLP. Organizations are prioritizing specific issues around gen AI and establishing governance frameworks from the outset, Machin said.

Cybersecurity Trends to Watch in 2024

Anna Delaney , Cal Harrison  •  January 1, 2024

In conjunction with a new report from CyberEd.io, Information Security Media Group asked some of the industry's leading cybersecurity and privacy experts about 10 top trends to watch in 2024. Ransomware, emerging AI technology and nation-state campaigns are among the top threats.

ISMG Editors: Will SVB Crash Kill Cybersecurity Innovation?

Anna Delaney  •  March 17, 2023

In the latest weekly update, ISMG editors discuss how the Silicon Valley Bank crash will affect innovation in the cybersecurity space, why the SEC fined cloud provider Blackbaud $3 million for its "erroneous" breach details, and why the feds fined a web hosting firm in a kids' insurance site hack.

What Does the UK Version of GDPR Mean for Businesses?

Anna Delaney  •  March 16, 2023

The U.K. government recently embarked on a plan to create its own version of the EU's General Data Protection Regulation, but attorney Jonathan Armstrong says he is "pretty skeptical" that this second attempt at privacy reform will successfully make it through the country's Parliament.

10 Belt-Tightening Tips for CISOs to Weather the Downturn

Anna Delaney , Cal Harrison  •  February 28, 2023

With signs pointing to a global economic downturn, cybersecurity organizations are already thinking about managing budgets and doing more than less. Four CISOs share a wide range of belt-tightening tips, from putting the squeeze on your vendors and suppliers to training and hiring from within.

ISMG Editors: Zero Trust Special

Anna Delaney  •  February 24, 2023

In the latest weekly update, John Kindervag, creator of zero trust and senior vice president of cybersecurity strategy at ON2IT, joins ISMG editors to discuss the top zero trust storylines of the year, the impact of ChatGPT on the cybersecurity industry and how to tackle MFA bypass attacks.

2022 Cyberthreat Trends and the Need for New Cyber Education

Anna Delaney  •  February 16, 2023

Threats from API and application vulnerabilities increased in 2022, but ransomware, human error and hygiene continue to pose the greatest threats to organizations, according to findings from CyberTheory's 2022 Performance Study. CyberTheory's Steve King shares how education can make a difference.

Why You Need to Wake Up to API Security Vulnerabilities

Anna Delaney  •  February 7, 2023

APIs represent the best and worst of times - "massive amounts of business value, but massive amounts of unmitigated risk," says Richard Bird, CSO, Traceable AI. In the past year, misconfigured or error-prone APIs resulted in high-profile breaches at Twitter and T-Mobile. He sees more on the horizon.

World Economic Forum's Cybersecurity Outlook 2023 Highlights

Anna Delaney  •  February 3, 2023

According to the World Economic Forum, geopolitical instability has helped to close the perception gap between business and cyber leaders' views on the importance of cyber risk management, and "91% of all respondents" believe that "a far-reaching, catastrophic cyber event" is on the horizon.

Advance Your Security Awareness Training Program: Research Results Analysis

Anna Delaney  •  January 27, 2023

Sara Pan, senior product marketing manager at Proofpoint shares insights from Proofpoint's 2022 Security Awareness Study on how to improve security awareness training programs.

Facebook, Instagram Blasted for 'Lame' Security Practices

Anna Delaney , Cal Harrison  •  January 26, 2023

Meta's popular social media platforms are increasingly being targeted by cybercriminals, and account takeover complaints rose over 1,000% last year. This social threat is spilling over into banks and government agencies, and experts criticize Meta for moving too slowly to address security issues.