Cyber Security Culture Importance In The Financial Sector Stephen Robinson Founder Xyone Cyber Security
UAE accounted for 2.4 million of the 1.7 billion 23/10/2014 UAE accounted for 2.4 million of the 1.7 billion ransomware attacks detected globally in Q1 of 2018 Malware Threats Source Trend Micro 2018
Threat Mitigation Strategy Encompass people, culture, processes and the physical environment to make the Financial Sector as resilient as possible against dangerous and growing threats of cyber attack by helping to create and implement a Threat Mitigation Strategy. External Physical Threat Mitigation Internal Threat Mitigation Information Security Compliance 2013 90% 2014 81% 81% 86% 86% 2013
Research with Lancaster University 2016 / 2017 - UK Based Financial and Legal Companies Research Findings: 45% - No Cyber Security Policies signed by employees. 73% - No Cyber Security Awareness Training for employees 100% - The Training was not relevant to the policy. The generic rules from the policy were not embedded within the training.
National Cyber Security Strategy for the state of Kuwait 2017- 2020 The Objective 1 Promote a culture of cyber security that supports safe and proper usage for cyberspace
Create An Internal Security Culture Threat intelligence and Communication Scenario Based Learning and Testing Actionable Awareness Building Internal Resilience Achieve a company wide Security Culture
Threat Intelligence and Communication Cybersecurity and fraud have now shifted from a walled-garden approach to a holistic one. Better communication and intelligence sharing, not only internally but to consumers. It is not just about technology, but People and Process. The shift from the old cybersecurity analyst that is very much focused on technology and cyber controls. To the new analyst that understands the business and can have a conversation with the customer in the payments space.
Create An Internal Security Culture Threat intelligence and Communication Scenario Based Learning and Testing Actionable Awareness Building Internal Resilience Achieve a company wide Security Culture
Scenario-based Training and Testing Structure exercises and scenario testing are also one of the best ways for the banking and financial industry to protect from cyber threats, specifically when they are conducted across the industry. Recreate different breach scenarios to understand where your gaps are and what you do well, it also gives an understanding about what needs to be built into your cyber process and resiliency process. It is essential to do this with everyone within the organisation accounts, compliance, sales, operations and technical staff.
Create An Internal Security Culture Threat intelligence and Communication Scenario Based Learning and Testing Actionable Awareness Building Internal Resilience Achieve a company wide Security Culture
Actionable Awareness Financial and banking Industry is seeking to get more actionable insights not just for their security analysts but also for the people within the business departments. It allows intelligence to quickly turn into a response by the most relevant people, especially important in a landscape where breaches happen in a heartbeat. It is important in the payments system, to create intelligence inside the financial tech company and publish it out and circulate that fast and someone needs to receive it and do something with it, so actionable intelligence.
Create An Internal Security Culture Threat intelligence and Communication Scenario Based Learning and Testing Actionable Awareness Building Internal Resilience Achieve a company wide Security Culture
“Bad things will sometimes happen that’s just a fact of life”. Build Resilience “Bad things will sometimes happen that’s just a fact of life”. Empower your employees with the knowledge - Security awareness is the process of teaching your entire team Test your employees with randomised assessments Info Sec compliance certifications helps them adhere to Information Security Protocol Rapidly disseminate urgent threat alerts. Reward and recognise those people that do the right thing for security
Create An Internal Security Culture Threat intelligence and Communication Scenario Based Learning and Testing Actionable Awareness Building Internal Resilience Achieve a company wide Security Culture
Cyber Security Culture “It takes 20 years to build a reputation and few minutes of cyber-incident to ruin it.” Stephane Nappo Global Chief Information Security Officer Société Générale International Banking. 2018 Global CISO of the year
Thank you for listening!