Page 68 - Cyber Warnings

However, reporting an incident to the police can often provide insights into an attack that
minimises further harm. Law enforcement has a significant role to play which goes beyond the
remit of private organisations; they can gather evidence, prosecute and bring down cybercrime
infrastructures, recover stolen data, and cut off their revenue streams.

This is the most effective way of policing cybercrime; we need to get better at reporting crimes
and pooling information. It is this collective intelligence that can build a more accurate picture of
the nature and scope of threats, its long term impact and how to allocate resources most
effectively.

The bottom line is that we can’t predict when or where the next incident will occur and as such,
the ‘assumption of compromise’ now must inform key decisions on how security resources are
allocated.

What every organisation can do is take control of the processes to minimise damage, preserve
digital evidence and aid quick recover.

With improved information sharing, the industry, as a whole, stands to benefit in identifying and
closing down crime syndicates.

About the Author:

Fortunato Guarino joined Guidance Software in June 2016 as a solution consultant and
cybercrime & data protection advisor for the EMEA Region. Prior to joining Guidance, Fortunato
spent more than 18 years working in IT with a focus on Cyber Security (IAM, DLP, DRM, PKI),
Computer Forensics solutions, Corporate Counterintelligence, Cybercrime fighting, Compliance
and legal obligations, including retention delay, BCR, cross-border ESI data transfers, track and
management of ESI legal holds process, and foreign (China) joint-ventures agreements in
regard with forensics & IT security management. In his previous positions, Fortunato served in a
variety of roles, including CISO, Head of Cyber Security Business Unit, eDiscovery Officer and
IT Court Expert.

He has strong experience managing EC, NAO, SAO and Asian regulations regarding privacy
and discovery, and is an expert in corporate WW security policies management, security for
intellectual property protection & IT forensic services support for legal, compliance, internal
auditing and human resources.

Fortunato holds post graduate degrees in IT from Jussieu University of Paris, politics from the
Sorbonne University of Paris, as well as a Master’s Degree in Economics, also from the
Sorbonne.

68 Cyber Warnings E-Magazine November 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide