4 practices CISOs should prioritize in their mobile security strategy

In an era where cyber threats are evolving at an alarming pace, the role of a Chief Information Security Officer (CISO) has never been more critical. Today, CISOs are the guardians of an organization’s digital assets, and in this role, they face a very daunting task — they’re being called to protect sensitive data, maintain customer trust and ensure business continuity without introducing friction. In the case of banks and financial institutions, this trove of data becomes all the more critical to protect.

The mobile threat is twofold: CISOs must secure their enterprise's mobile apps and mobile devices accessing the enterprise. With the rise of mobile banking applications, money-motivated cyber criminals are realizing the potential payoff of targeting traditional and emerging fintech and trading apps. Recent research from Zimperium discovered that traditional banking apps accounted for 61% of the apps targeted by 29 specific banking trojans in 2023, while the other 39% accounted for emerging fintech and trading apps. With enterprises allowing more access than ever on personal devices, the organization's attack surface continues to expand making mobile devices a hotbed for destructive cyberattacks. In fact, Zimperium’s Global Mobile Threat Report 2023 showed a 187% year-over-year increase in the number of compromised mobile devices.