The cybersecurity skills shortage is not only real – it is one of the biggest challenges IT leaders face today. As the threat landscape becomes more complex, it’s difficult to find and hire trained personnel who are both cyber professionals and affordable. To make matters worse, long-term retention of those employees is almost impossible as they are always being poached by other companies.
Version 1.0 of the NIST Framework for Improving Critical Infrastructure Cybersecurity (CSF) celebrated its fourth birthday in February. The CSF is a “risk-based approach to managing cybersecurity risk... designed to complement existing business and cybersecurity operations.” I recently spoke with Matthew Barrett, NIST program manager for the CSF, and he provided me with a great deal of insight into using the framework.
It has only been in the last few years that the networked enablement of everyday business functions has forced enterprises to embrace the fact that physical security and cybersecurity must be treated in a unified manner.
These security solutions, ranging from aesthetically focused turnstiles to visitor management solutions, help to balance both sides of the lobby security equation.
Companies remain on the hook for ensuring their vendors are up to task when it comes to cybersecurity, privacy compliance and continuity of operations. This checklist can help determine the maturity of your vendor risk management program.
With the growing visibility around cyber breaches, there is now a heightened sensitivity among corporate boards and executive teams as they become more engaged in the management of cyber risk, and its ability to impact their business and personal indemnity.