Page 84 - Cyber Warnings

• disruption of business operations due to the confidentially, integrity, and availability of
data being compromised; and

• significant financial costs relating to the investigation, response, and recovery from a
potential compromise or incident.

Conclusion

Today’s problems in cybersecurity cannot be addressed by technology alone. Organizations
must also address two key “people-related” problems in concert: recruiting and retaining
cybersecurity talent and creating an effective culture of cybersecurity in their workforce. The
Department of Defense has made some important headway in this holistic approach to
cybersecurity, and commercial companies can learn from these experiences.

Hands-on learning, for both IT and general workforce members is critical. Ideally, this kind of
education will start early in a child’s education. As we have seen, there is no silver bullet that
will solve the cybersecurity problem; it is going to take time and financial investment. However,
the stakes are too high if we don’t make these changes: companies will be attacked and will
collapse.

Using ROI-based innovation techniques and combining technology with training to improve your
cybersecurity infrastructure management will help companies more quickly bring the reality of
their cybersecurity program’s effectiveness into alignment with their perception of its strength.

About the Author
Mr. Heckman is the Vice President and Chief Information Security Officer
(CISO) for Criterion Systems. As the lead for Criterions Cyber Security
Center of Excellence (COE), he is responsible for the operation of the
company’s strategic and comprehensive information security program that
defines, develops, maintains, and implements policies and processes that
enable consistent, effective information security practices which minimize risk
and ensure the integrity, confidentiality, and availability of information that is owned, controlled
and processed by the organization. He monitors the external threat environment for emerging
threats, and advises relevant stakeholders on the appropriate courses of action. Mr. Heckman
liaises with external agencies, such as law enforcement and other advisory bodies as
necessary, to ensure that the organization maintains a strong security posture.

Bob can be reached online at [email protected], at his LinkedIN profile:
https://www.linkedin.com/in/bobheckman/ and at our company website http://www.criterion-
sys.com.

84 Cyber Warnings E-Magazine – May 2017 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide