ISC2 Blog

Elevate your Security Congress experience with pre-conference workshops!

How would you like to attend high-level cybersecurity workshops in community with your peers ahead of one of the industry’s hottest events? You’ll get your chance on October 23 and/or October 24, the two days leading up to this year’s (ISC)² Security Congress! These workshops are being offered live, onsite at the Gaylord Opryland Resort in Nashville, Tennessee. Choose from among 10 one- and two-day workshops that will increase your knowledge, present opportunities to mix and mingle with fellow cyber professionals and, if you’re an (ISC)² Member or Associate, provide those all-important Continuing Professional Education (CPE) credits! These amazing workshops... Read more →

Infosecurity Europe: Are Universities Turning Out Cyber Graduates with The Right Skills?

Are today’s graduates being trained to cope with future challenges? A panel of practitioners debated whether current graduates are coming away with what they need to progress. By John E. Dunn If you’re looking to hire cybersecurity people, it’s easy to devote all your attention to today’s skills problems. The biggest of these right now is simply a lack of candidates with the right skills and qualifications. This drives up costs in an industry that has yet to reach a consensus on how shortages might be addressed without simply kicking the problem into the deep future. Next, you have to... Read more →

Infosecurity Europe: Are Certifications a Barrier to Widening the Cybersecurity Talent Pool?

Is the importance of certifications at risk of turning them into check box hiring aids for organizations in a hurry? A CISO panel at this week’s Infosecurity Europe conference weighed up the arguments. By John E. Dunn Certifications are a signal of personal achievement, professional development, and hiring credibility. But at a time of skills shortages are they at risk of being misunderstood and misapplied in ways that might sometimes turn them into a barrier to better cybersecurity? It’s a complex topic that was given an airing at this week’s Infosecurity Europe conference session What’s the Point of Cyber Security Certifications?... Read more →

Infosecurity Europe: Doubt the Professionalization of Cyber Gangs? Just Look at Their HR Departments

Security researcher Keren Elazari explained the staggering level of investment and planning at the world’s first cyber threat conglomerate. By Tamlin Magee Behind the $150 million in payments associated with the disastrous Conti ransomware – described by the U.S. Federal Bureau of Investigation (FBI) as the costliest ever strain, and which brought down targets’ operations across the world – was not a rag-tag gang of opportunist criminals and individual hackers, but an extremely professionalized operation with offices, growth projections, hiring plans, and enormous infrastructure investment. The security community has long warned of the professionalization of cyber attackers, especially as dark... Read more →

Infosecurity Europe: Why E-Waste Is a Cybersecurity Issue

The CEO of BNP Paribas 3 Step IT said that organizations must plug themselves into the circular economy not only to boost their ESG, but to be more secure too. By Tamlin Magee Last year, the U.S. Securities and Exchange Commission (SEC) found that banking giant Morgan Stanley had improperly disposed of reams of personal identifying information. In 2015, it had supposedly commissioned a moving and storage company to get rid of its hard drives and servers. The catch: said company had absolutely no experience disposing of data and sold the devices to a third party, which then auctioned them... Read more →

Infosecurity Europe: Drop The Jargon, CISOs Tell Cyber Community

Cybercrime is just another crime, said a panel at InfoSec 2023 including the CISOs of EasyJet and Penguin Random House, and we need to start treating it like one. By Tamlin Magee In order to outsmart cyber criminals, the cyber industry needs to drop the jargon, demystify itself, and get into the mindset of attackers, agreed a panel of experts speaking at Infosecurity Europe 2023 in London including the CISOs of airline EasyJet and Penguin Random House. “The threat actors, it's a business to them and they're managing risk,” said EasyJet CISO Paul Midian. “They just happen to manage a... Read more →

Infosecurity Europe 2023 Preview – (ISC)² at Infosec and More

In our second preview of Infosecurity Europe 2023, we look at what (ISC)² will be doing at the show to support members and the wider industry, alongside looking at the opening talks across the three days of the conference, held at ExCel in London from June 20-22. By Chris Green We are less than a week away from Infosecurity Europe 2023 opening its doors at London’s ExCel Conference Center. Alongside opening speakers Olympic sprinter Michael Johnson on day one, acclaimed author, newspaper columnist and table tennis expert Matthew Syed on day two and noted cybersecurity analyst and academic Keren Elazari... Read more →

From Silo to Synergy between Cybersecurity and Privacy in Europe

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a pair of webinars, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. After looking at the landscape in the U.S., we now turn our attention to Europe. The conversation brought together conversation Isabelle Roccia, IAPP managing director Europe, Christian Toon, CISO at Pinsent Masons Law Company, Anna Zeiter, CPO at eBay and Ilias Chantzos, global & privacy officer at Broadcom. By John E. Dunn  The reality of data breaches is causing the structure of corporate management to rapidly evolve. The traditional model... Read more →

Infosecurity Europe 2023 Preview – Our Pick of the Keynote Sessions

In the first of two previews of Infosecurity Europe 2023, we look at our top picks for unmissable keynote sessions across the three days of the conference, held at ExCel in London from June 20-22. By John E. Dunn As the pivotal cybersecurity conference in the region, every Infosecurity Europe conference is oriented to topical themes. This year is no exception, with the speaker lineup covering everything from the on-going anxiety of cyberwar, how zero trust can be made to work once it leaves the drawing board, and the never-ending puzzle of assessing supply chain risk. The following is our... Read more →

Get Ready For (ISC)² Congress – Keynote Speakers Announced

It’s time to make your plans to join us in Nashville, Tennessee, with five visionary keynotes announced alongside industry-leading education, new career resources, exhibitor showcases and much more. The road to (ISC)² Security Congress is getting busier by the day, with just over 150 days until the doors open at the Gaylord Opryland Resort in Nashville, Tenn., starting on October 25. Five keynote speakers have been announced who will frame the conference over three days and give attendees a wealth of new ideas and perspectives to take back and use in their organizations and communities. The keynote speakers are: Rumman... Read more →

RSA Conference Day Four: Threat to Public Key Encryption From Quantum Computers Overstated

Quantum computers won’t put PKE in peril imminently, but its potential has altered the course of crypto development, says a panel of experts including Whitfield Diffie, Adi Shamir, Radia Perlman, Anne Dames, and Clifford Cocks. By John E. Dunn General quantum computers don’t yet exist as usable tools and yet the mere possibility that they will in future is already transforming how people understand encryption security, a panel of some of the world’s best-known cryptographers has agreed during a session at the RSA Conference in San Francisco. The panel included famous cryptographers Adi Shamir (RSA co-inventor), Whitfield Diffie (of Diffie-Hellman... Read more →

RSA Conference Day Three: U.S. Ambassador Tells RSA Conference “We’re In A Deterrence Hole” On Cyberwar

Nathaniel Fick issues stark warning during discussion on cyber diplomacy. By: Joe Fay The U.S. and its allies are in a “deterrence” hole when it comes to cyber adversaries, the U.S. ambassador at large for cyberspace and digital policy told an audience at the RSA Conference in San Francisco. Nathaniel Fick was speaking on a panel considering “The Role of Partnerships in Advancing Cyber Diplomacy”, which inevitably focused on the results of a breakdown in conventional diplomacy in the shape of the war in Ukraine. Fick said that 20 years of diplomacy had resulted in the United Nations’ (U.N.) “norms”... Read more →

RSA Conference Day Two: Democracy Needs Urgent Rethink to Cope with Technology Like AI, Argues Bruce Schneier

Technology has amplified disinformation, polarization and zero-sum politics, Bruce Schneier told RSA conference goers. Addressing this will require new thinking on the nature of democracy. By John E. Dunn The technologies of the 21st Century are being used to “hack” democracy and the system needs to change rapidly if it is to survive this onslaught, Bruce Schneier has told delegates at San Francisco’s RSA Conference. Schneier painted a dystopian picture of the current relationship between technology and democracy in countries such as the U.S. Disinformation was often as or more powerful than information. Knowingly or not, powerful tech platforms exploit... Read more →

(ISC)² Security Congress in Nashville – See Y’all There!

We are less than 200 days away from the 2023 (ISC)² Security Congress conference. Our team is hard at work reviewing the presentations many of you submitted for breakout sessions this year. This year’s event will feature more than 100 educational sessions, compelling keynotes and peer-to-peer knowledge exchanges over two and a half days. Stay tuned for keynote announcements, as well as the full conference agenda, which will be released this summer. The theme for this year is Lead with Confidence and the following tracks will be featured: Governance, Risk and Compliance Cyber Leadership Cloud Security Security Operations Software Security... Read more →

Meet the 2023 (ISC)² Bylaws Committee

You spoke, and we listened – you want more opportunities to be involved and contribute to the decision-making process at (ISC)². Let’s get started. The (ISC)² Board of Directors Bylaws Committee will host the first in a series of webinars March 21 to introduce members to this year’s bylaws review and amendment process. Join us to learn how you can share your ideas to help build a better (ISC)² as we look to the future. The new Bylaws Committee, chaired by Board of Directors member Lisa Young, CISSP, consists of Directors and members-at-large. Join the webinar to hear directly from... Read more →

(ISC)² Security Congress 2023 Begins Call for Presentations

Practitioners from across the cybersecurity industry and the (ISC)² member community are invited to submit their session proposals as the cyber world begins its journey to Nashville. (ISC)² today launched its call for presentations for its annual (ISC)² Security Congress event, taking place live in Nashville, Tennessee on October 25-27, 2023 at the Gaylord Opryland Resort and Convention Center and also online. One of the biggest vendor-neutral global cybersecurity events on the calendar, (ISC)² Security Congress 2023 brings together thousands of front-line cybersecurity practitioners and cybersecurity business leaders to network, share ideas and continue their ongoing cybersecurity education through three... Read more →

Achieving Data Security and Analytics with AI - Member Recap from (ISC)² Security Congress 2022

A member recap of “Achieving Data Security and Analytics with AI” presented by Glendon Schmitz at (ISC)² Security Congress 2022. By Angus Chen, CISSP, CCSP, PMP, MBA Although “data is the new oil”, there are many problems with working on production data directly. Organizations encounter regulations to protect privacy such as General Data Protection Regulation (GDPR). The fine for violating GDPR is 17 million British Pounds or 4% annual global turnover. Amazon was charged with U.S. $887 million, WhatsApp U.S. $267 million and Marriott 18 million British Pounds for data breaches. The list goes on and on. Furthermore, organizations sharing... Read more →

Build Your Network with (ISC)² and BUiLT

(ISC)² recently announced an expansion of its diversity, equity and inclusion (DEI) initiative through partnerships with several organizations around the world. “It’s no secret that the cybersecurity industry isn’t nearly as diverse as it should be,” said Dwan Jones, director of Diversity, Equity and Inclusion at (ISC)². “Our mission at (ISC)² is to not only enable individuals from all backgrounds to enter the cybersecurity industry but also to empower and equip them to excel in their positions and continuously grow in their careers.” BUiLT (Blacks United in Leading Technology) is one of the DEI partners, and along with (ISC)² will... Read more →

Avoiding Cloud Security Fails - Excerpts from (ISC)² Security Congress 2022

By Chinatu Uzuegbu, CISSP, CEO/Managing Cyber Security Consultant at RoseTech CyberCrime Solutions Ltd. (ISC)² Security Congress 2022 was a huge success with engaging speakers from around the world filled with insights. The theme of this year’s event was Empower a Safer, More Secure Cyber World and they certainly inspired many to do so. In this blog, we would be sharing the excerpts from Top Cloud Security Fails and How to Avoid Them delivered by Karl Ots, CISSP, Head of Cloud Security, EPAM and Linkedin Learning Instructor. (ISC)² Security Congress attendees can earn CPE credits by watching this and all other... Read more →

#ISC2Congress 2022: Highlighting the Need for Collaborative Defense

A common theme that permeates (ISC)² Security Congress each year is the need to work collaboratively against cyber adversaries. This year was no different, as speaker after speaker during the event in Last Vegas stressed the importance of collaboration, information-sharing and teamwork. The theme emerged early on, as (ISC)² CEO Clar Rosso made her opening remarks. Referring to the cybersecurity workforce shortage, which now stands at 3.4 million vacant positions, Clar called for a new way of thinking to build cybersecurity teams. “And it starts with you,” she asserted “It starts with this community coming together. We can close this... Read more →