(ISC)² Blog

Infosecurity Europe 2023 Preview – Our Pick of the Keynote Sessions

In the first of two previews of Infosecurity Europe 2023, we look at our top picks for unmissable keynote sessions across the three days of the conference, held at ExCel in London from June 20-22. By John E. Dunn As the pivotal cybersecurity conference in the region, every Infosecurity Europe conference is oriented to topical themes. This year is no exception, with the speaker lineup covering everything from the on-going anxiety of cyberwar, how zero trust can be made to work once it leaves the drawing board, and the never-ending puzzle of assessing supply chain risk. The following is our... Read more →

Get Ready For (ISC)² Congress – Keynote Speakers Announced

It’s time to make your plans to join us in Nashville, Tennessee, with five visionary keynotes announced alongside industry-leading education, new career resources, exhibitor showcases and much more. The road to (ISC)² Security Congress is getting busier by the day, with just over 150 days until the doors open at the Gaylord Opryland Resort in Nashville, Tenn., starting on October 25. Five keynote speakers have been announced who will frame the conference over three days and give attendees a wealth of new ideas and perspectives to take back and use in their organizations and communities. The keynote speakers are: Rumman... Read more →

RSA Conference Day Four: Threat to Public Key Encryption From Quantum Computers Overstated

Quantum computers won’t put PKE in peril imminently, but its potential has altered the course of crypto development, says a panel of experts including Whitfield Diffie, Adi Shamir, Radia Perlman, Anne Dames, and Clifford Cocks. By John E. Dunn General quantum computers don’t yet exist as usable tools and yet the mere possibility that they will in future is already transforming how people understand encryption security, a panel of some of the world’s best-known cryptographers has agreed during a session at the RSA Conference in San Francisco. The panel included famous cryptographers Adi Shamir (RSA co-inventor), Whitfield Diffie (of Diffie-Hellman... Read more →

RSA Conference Day Three: U.S. Ambassador Tells RSA Conference “We’re In A Deterrence Hole” On Cyberwar

Nathaniel Fick issues stark warning during discussion on cyber diplomacy. By: Joe Fay The U.S. and its allies are in a “deterrence” hole when it comes to cyber adversaries, the U.S. ambassador at large for cyberspace and digital policy told an audience at the RSA Conference in San Francisco. Nathaniel Fick was speaking on a panel considering “The Role of Partnerships in Advancing Cyber Diplomacy”, which inevitably focused on the results of a breakdown in conventional diplomacy in the shape of the war in Ukraine. Fick said that 20 years of diplomacy had resulted in the United Nations’ (U.N.) “norms”... Read more →

RSA Conference Day Two: Democracy Needs Urgent Rethink to Cope with Technology Like AI, Argues Bruce Schneier

Technology has amplified disinformation, polarization and zero-sum politics, Bruce Schneier told RSA conference goers. Addressing this will require new thinking on the nature of democracy. By John E. Dunn The technologies of the 21st Century are being used to “hack” democracy and the system needs to change rapidly if it is to survive this onslaught, Bruce Schneier has told delegates at San Francisco’s RSA Conference. Schneier painted a dystopian picture of the current relationship between technology and democracy in countries such as the U.S. Disinformation was often as or more powerful than information. Knowingly or not, powerful tech platforms exploit... Read more →

(ISC)² Security Congress in Nashville – See Y’all There!

We are less than 200 days away from the 2023 (ISC)² Security Congress conference. Our team is hard at work reviewing the presentations many of you submitted for breakout sessions this year. This year’s event will feature more than 100 educational sessions, compelling keynotes and peer-to-peer knowledge exchanges over two and a half days. Stay tuned for keynote announcements, as well as the full conference agenda, which will be released this summer. The theme for this year is Lead with Confidence and the following tracks will be featured: Governance, Risk and Compliance Cyber Leadership Cloud Security Security Operations Software Security... Read more →

Meet the 2023 (ISC)² Bylaws Committee

You spoke, and we listened – you want more opportunities to be involved and contribute to the decision-making process at (ISC)². Let’s get started. The (ISC)² Board of Directors Bylaws Committee will host the first in a series of webinars March 21 to introduce members to this year’s bylaws review and amendment process. Join us to learn how you can share your ideas to help build a better (ISC)² as we look to the future. The new Bylaws Committee, chaired by Board of Directors member Lisa Young, CISSP, consists of Directors and members-at-large. Join the webinar to hear directly from... Read more →

(ISC)² Security Congress 2023 Begins Call for Presentations

Practitioners from across the cybersecurity industry and the (ISC)² member community are invited to submit their session proposals as the cyber world begins its journey to Nashville. (ISC)² today launched its call for presentations for its annual (ISC)² Security Congress event, taking place live in Nashville, Tennessee on October 25-27, 2023 at the Gaylord Opryland Resort and Convention Center and also online. One of the biggest vendor-neutral global cybersecurity events on the calendar, (ISC)² Security Congress 2023 brings together thousands of front-line cybersecurity practitioners and cybersecurity business leaders to network, share ideas and continue their ongoing cybersecurity education through three... Read more →

Achieving Data Security and Analytics with AI - Member Recap from (ISC)² Security Congress 2022

A member recap of “Achieving Data Security and Analytics with AI” presented by Glendon Schmitz at (ISC)² Security Congress 2022. By Angus Chen, CISSP, CCSP, PMP, MBA Although “data is the new oil”, there are many problems with working on production data directly. Organizations encounter regulations to protect privacy such as General Data Protection Regulation (GDPR). The fine for violating GDPR is 17 million British Pounds or 4% annual global turnover. Amazon was charged with U.S. $887 million, WhatsApp U.S. $267 million and Marriott 18 million British Pounds for data breaches. The list goes on and on. Furthermore, organizations sharing... Read more →

Build Your Network with (ISC)² and BUiLT

(ISC)² recently announced an expansion of its diversity, equity and inclusion (DEI) initiative through partnerships with several organizations around the world. “It’s no secret that the cybersecurity industry isn’t nearly as diverse as it should be,” said Dwan Jones, director of Diversity, Equity and Inclusion at (ISC)². “Our mission at (ISC)² is to not only enable individuals from all backgrounds to enter the cybersecurity industry but also to empower and equip them to excel in their positions and continuously grow in their careers.” BUiLT (Blacks United in Leading Technology) is one of the DEI partners, and along with (ISC)² will... Read more →

Avoiding Cloud Security Fails - Excerpts from (ISC)² Security Congress 2022

By Chinatu Uzuegbu, CISSP, CEO/Managing Cyber Security Consultant at RoseTech CyberCrime Solutions Ltd. (ISC)² Security Congress 2022 was a huge success with engaging speakers from around the world filled with insights. The theme of this year’s event was Empower a Safer, More Secure Cyber World and they certainly inspired many to do so. In this blog, we would be sharing the excerpts from Top Cloud Security Fails and How to Avoid Them delivered by Karl Ots, CISSP, Head of Cloud Security, EPAM and Linkedin Learning Instructor. (ISC)² Security Congress attendees can earn CPE credits by watching this and all other... Read more →

#ISC2Congress 2022: Highlighting the Need for Collaborative Defense

A common theme that permeates (ISC)² Security Congress each year is the need to work collaboratively against cyber adversaries. This year was no different, as speaker after speaker during the event in Last Vegas stressed the importance of collaboration, information-sharing and teamwork. The theme emerged early on, as (ISC)² CEO Clar Rosso made her opening remarks. Referring to the cybersecurity workforce shortage, which now stands at 3.4 million vacant positions, Clar called for a new way of thinking to build cybersecurity teams. “And it starts with you,” she asserted “It starts with this community coming together. We can close this... Read more →

#ISC2Congress 2022: Ian Bremmer - Is Technology the New World Order?

A new world order is taking shape as private enterprise, in the form of technology companies, start playin a decisive role in geopolitical events, said Ian Bremmer, the president and founder of Eurasia Group. Speaking to an audience gathered in Las Vegas for the 2022 (ISC)² Security Congress, Bremmer posited that in the not-too-distant future technology companies may supplant governments in making decisions because they control the digital world. “What if governments start fundamentally failing in being able to deliver the kinds of security that are required for their people,” Bremmer said. A window into the role of private enterprise... Read more →

#ISC2CONGRESS 2022: Panel: Why Apprenticeships Matter

The cybersecurity community grew by 11% over the past year to 4.7 million professionals around the globe, but so did the skills gap. In fact, the gap widened at the faster pace of 25%, leading to 3.4 million vacancies, according to (ISC)² research. (ISC)² CEO Clar Rosso shared these statistics during her opening remarks at Security Congress, taking place this week in Las Vegas. She said no single solution exists to close the gap. As (ISC)² has argued in the past, closing the gap will take a multipronged approach that involves attracting people from outside the industry, working with academia,... Read more →

#ISC2Congress 2022: Effective Cybersecurity Takes Collaboration

The approach to cybersecurity historically has revolved around self-interest. It’s time to change that to think about the collective, according to Ciaran Martin, founder of the U.K.’s National Cyber Security Centre. “We're all interested in cybersecurity because we're professionals, but we're all interested in it for ourselves, for our own financial and economic and other interests,” Ciaran said in a keynote he delivered to open the second day of (ISC)²’s Security Congress 2022. The event is taking place this week in Las Vegas. Understandably, everyone wants to protect their families and organizations, Ciaran said. But to get cybersecurity right, he... Read more →

#ISC2Congress 2022: Approach Cybersecurity as a Science

In a thought-provoking presentation during Security Congress, Walmart’s chief security architect challenged cybersecurity professionals to take a more scientific approach to their work. Ira Winkler urged organizations to implement comprehensive behavioral cybersecurity programs that use statistical analysis to understand human actions. With this approach, he argued, you can better address bad habits that contribute to security vulnerabilities. It also allows you to learn and address the needs and wellness of cybersecurity teams. Too often, he says users get wrongly blamed for security issues. “If you have a user that creates harm, the harm is a result of a poorly designed... Read more →

#ISC2Congress 2022: Lessons from a Ransomware Attack

When an organization suffers a ransomware attack, how well they can respond comes down to preparedness. An up-to-date, comprehensive incident response plan (IRP) can make a big difference, said Joseph Carson, Chief Security Scientist and Advisory CISO at Delinea. Joseph spoke about ransomware response on Monday as part of the annual (ISC)² Security Congress, taking place through Wednesday in Las Vegas. To illustrate the importance of being prepared when responding to an attack, Joseph walked his audience through an experience he had with a client. The company’s security team was notified of an attack by the hackers through email and... Read more →

#ISC2Congress 2022: Empowering the Cyber Community

(ISC)² CEO Clar Rosso opened Security Congress in Las Vegas today by revealing this year’s event theme – EMPOWER. “Security Congress is about (ISC)² helping to empower you to strengthen your efforts against the bad guys, helping you to more effectively secure our information and our systems, and helping you to be more successful,” she said. Clar told attendees at the event, taking place today through Wednesday, that they are stronger together. Drawing on the power of community, the community will create “a more safe and secure cyber world.” Cybersecurity, she said, has taken center stage across the world. While... Read more →

#ISC2CONGRESS – EMPOWERING NEW CONNECTIONS

This year’s (ISC)² Security Congress will feature increased opportunities to network with your peers and will be engaging whether you are joining in-person or virtually. We are looking forward to our first ever hybrid Security Congress where we will be live streaming across the globe from Caesars Palace in Las Vegas. Whether you have attended in the past or are gearing up for your first (ISC)² event, this year’s Security Congress has something fun for everyone! In addition to the 100+ educational sessions throughout the live event, you will hear from dynamic keynote speakers and learn about new products from... Read more →

(ISC)² CEO Clar Rosso Honored by SC Media's Women in IT Security Program

Closing the gender and diversity gap in cybersecurity is critical if the profession is serious about addressing its current workforce crisis. (ISC)² estimates that the Cybersecurity Workforce Gap currently stands at 2.72 million professionals globally, but women only make up roughly 25% of the cybersecurity industry, compared to at least 40% of the global workforce. Every year, the SC Media Women in IT Security program celebrates significant contributions of those who have faced these challenges and made a positive impact on the advancement of cybersecurity in government or the private sector. (ISC)² CEO Clar Rosso was recognized as an advocate... Read more →