Content by Tom Field

CISO Tackles the Accidental Insider Threat

Tom Field  •  July 8, 2019

For years, security leaders focused primarily on malicious insiders - those who intend to do harm to an organization. But CISOs are increasingly concerned about the accidental insider. And Anne-Marie Scollay of Axiom Law has a program targeting this growing threat.

Blockchain Revisited: How Can It Reduce Fraud?

Tom Field  •  July 8, 2019

Critics say blockchain is a technology looking for a purpose, but Microsoft's David Houlding says organizations are using blockchain today to validate identities and to help prevent fraud. He shares use cases and emerging best practices.

HSBC Whistleblower on 'Too Big to Jail'

Tom Field  •  July 8, 2019

HSBC paid a record $1.92 billion fine for money laundering violations in 2012. But no one ever went to jail for the crimes. Whistleblower Everett Stern discusses lessons learned from the case and the concept of "too big to jail."

Breach Impact on the CISO

Tom Field  •  July 8, 2019

Increasingly, regulators are looking to hold individual executives accountable for data breaches. This is where attorney Aravind Swaminathan steps in to represent security leaders in legal actions. What are the potential liabilities?

Tackling Healthcare's IAM Challenge

Tom Field  •  July 5, 2019

The traditional IAM strategy has been to tie individual users with a unique device. But that doesn't work in healthcare settings, where doctors and nurses often share multiple devices. Jigar Kadakia of Partners HealthCare talks about how he approaches this critical challenge.

Medical Device Security: The CISO's View

Tom Field  •  July 5, 2019

Encouraged by the moves of medical device manufacturers, Jennings Aske, CISO of NY Presbyterian Hospital, says the "state of the union" of medical device security has improved dramatically. But what more is needed to mitigate risks?

'Zero Trust' Adds Up to Better Security

Tom Field  •  July 3, 2019

New York's Interfaith Medical Center is one of the first hospitals to fully implement a zero trust network security strategy. Chris Frenz, the hospital's CISO, explains why he adopted that approach and offers lessons learned from the transition.

Medical Device Security: The Manufacturer's View

Tom Field  •  July 3, 2019

Awareness of medical device security issues has grown dramatically over the past few years. But Michael McNeil of device manufacturer Philips argues that cybersecurity is still years behind where it should be, so stakeholders are playing catch-up.

Healthcare Security: Tactics for Reducing Risk

Tom Field  •  July 3, 2019

Reducing risk is a tall order, but IBM's Christopher Bontempo says healthcare security leaders can get immediate and measurable results by concentrating on two aspects: data security and incident response.

Charlotte Leaders Focus on Third-Party Risk

Tom Field  •  June 17, 2019

Third-party risk has emerged as one of 2019's top security challenges, and the topic was the focus of a recent roundtable dinner in Charlotte. RSA's Patrick Potter attended that dinner and shares insight on how security leaders are approaching this aspect of digital risk management.

The Fight Against Malicious Bots

Tom Field  •  June 6, 2019

Organizations and their applications are under attack from automated bots and bad actors. And many of these attacks are undetectable by conventional security technologies. How can organizations detect and prevent this activity? Carl Gustas of Cequence Security shares insights.

What CCPA Means to Security Leaders

Tom Field  •  May 31, 2019

Post-GDPR, the California Consumer Privacy Act was the first piece of US legislation to emerge - but it's hardly the last. Attorney Sadia Mirza of Troutman Sanders talks about the potential impact of CCPA and other pending privacy legislation.

The Growth of Adaptive Authentication

Tom Field  •  May 31, 2019

The right authentication controls at the right time for the right transactions - the adaptive authentication message is taking off, says OneSpan's Tim Bedard. And here are some quick wins organizations might focus on when starting down the path.

Open Source Security - How to Defend at the Speed of Attack

Tom Field  •  May 30, 2019

On the sixth stop of a multi-city tour, ISMG and Sonatype visited San Francisco for an engaging discussion on how to mitigate risks introduced by open source software. Sonatype CMO Matt Howard discusses the relevance and value of this application security conversation.

Security at the Speed of the Cloud

Tom Field  •  May 24, 2019

Migrating from on-premises data security to the cloud and then embedding security in the application development process are common challenges for enterprises. Dan Fitzgerald, a CISO at the consultancy McKinsey & Co., shares insights on how to make these transitions.