Chester Wisniewski, the Director and Global Field CISO at Sophos, recently sat down for an interview with Help Net Security to discuss various cybersecurity topics, including the changing ransomware landscape, the risks associated with quantum decryption threats, and the importance of vendor security validation.
According to Wisniewski, cyber resilience is now more critical than simply focusing on defense mechanisms. He emphasized the role of artificial intelligence in managing threats and stressed the need for continuous improvements, transparency, and proactive security measures.
One of the key points discussed in the interview was the shift in tactics by cybercriminals away from traditional ransomware attacks towards data-centric extortion. Wisniewski highlighted the importance for companies to adjust their incident response and business continuity planning to address this new threat landscape. He mentioned the significance of reducing the time to detect and respond to incidents, regardless of whether they involve data encryption or extortion.
When it comes to assessing the risk of “harvest now, decrypt later” attacks, Wisniewski pointed out that such threats are primarily relevant to organizations handling critical national security data. While it is essential to migrate towards quantum-resistant cryptography, he emphasized the need for organizations to start integrating post-quantum cryptography into their systems proactively.
The discussion also touched upon the issue of third-party vulnerabilities and how organizations can establish more effective security validation and monitoring of vendors. Wisniewski suggested involving the security team early in the procurement process to assess potential security risks and recommended looking into the security culture of vendors as a key indicator of their commitment to cybersecurity.
With the increasing volume of real-time threat intelligence data, the challenge lies in prioritizing actionable insights without overwhelming security teams with alert fatigue. Wisniewski highlighted the importance of leveraging managed detection and response vendors with expertise in threat triage and utilizing automation and artificial intelligence tools to streamline security operations.
In conclusion, Wisniewski emphasized the importance of focusing on cyber resilience rather than just defense in the face of evolving cyber threats. He underscored the need for organizations to adopt a well-rounded security approach, continuously iterate and improve their security measures, and prioritize resilience to effectively combat cyber threats.