Content by Tom Field

Governance, Privacy and Ethics in the Age of AI

Tom Field  •  May 15, 2024

Artificial intelligence, generative AI and machine learning have always been part of the broader privacy conversation, according to J. Trevor Hughes, CEO and president, IAPP. Workday Vice President and Chief Privacy Officer Barbara Cosgrove shares how she helped the company build an AI framework.

The OT Security Revolution and the Need for Robust Defenses

Tom Field  •  May 15, 2024

In the wake of geopolitical tensions, nation-state threats have "crossed the line more often than they ever have," said Dawn Cappelli, head of OT-CERT at Dragos, warning of the growing threat to critical infrastructure and emerging challenges for small and medium enterprises.

The Convergence of Policy and Technology in Cybersecurity

Tom Field  •  May 15, 2024

Cybersecurity is a "team sport" requiring technology to align with robust policy frameworks to secure nations as well as organizations, said Marene Allison, CEO of Marene Allison Consulting. "All these pieces must come together - technology, government policy and corporate strategy," she said.

CyberEdBoard Profiles in Leadership: Nicole Darden Ford

Tom Field  •  May 14, 2024

From working in B2B industries to now shifting to a B2C industry, Nicole Darden Ford, CISO, Nordstrom, is confident of bringing a fresh perspective to tackling the retail sector's complex cybersecurity and fraud challenges.

Cyber Insurers Embrace Cloud Metrics, Prepare for AI Impact

Tom Field  •  May 13, 2024

As the cyber insurance market matures, insurers are leveraging artificial intelligence technology and cloud security metrics to better assess risks and provide broader coverage, said Monica Shokrai, head of business risk and insurance at Google Cloud.

The Crossroads of AI and Application Security

Tom Field  •  May 9, 2024

Chris Wysopal, CTO and co-founder of Veracode, discusses the transformative role of generative AI in application security. While emphasizing the potential risks of AI-generated code harboring vulnerabilities, he also underscores the promising solutions AI offers for automating code fixes.

Applying Human Risk Management for Better Security Awareness

Tom Field  •  May 9, 2024

Creating and understanding risk profiles for individual users in an organization can help optimize the effectiveness of security awareness training, which is just one tool under the wider umbrella of human risk management, said Ashley Rose, founder and CEO of Living Security.

CISA Wants Everyday Americans to Help 'Secure Our World'

Tom Field  •  May 9, 2024

The U.S. Cybersecurity and Infrastructure Security Agency is calling on everyone from major technology companies to ordinary Americans to take part in securing the nation's digital landscape with a new public service announcement titled "Secure Our World."

Supercharge Security With AI

Tom Field  •  May 8, 2024

Google is building AI cyber defense for securing tech infrastructure, releasing new tools for defenders, and launching secure AI framework and security training to help AI secure, empower security teams and advance efforts toward a digital future, said Phil Venables, CISO for Google Cloud.

AI, Disinformation and Vendor Consolidation

Tom Field  •  May 7, 2024

Generative AI has ushered in a new era of cybersecurity, presenting opportunities for innovation while also posing threats to AI models. "It's a curse and a blessing," and the state of cybersecurity is "vibrant" and experiencing a "golden age," said Dave DeWalt, founder and CEO, NightDragon.

Next-Generation Identity Platforms to See Sizeable Adoption

Tom Field  •  May 7, 2024

Organizations recognize the need for robust identity platforms to protect data and apply controls. With so much data being generated and processed, the market is going to experience a proliferation of next-generation identity platforms, said Alberto Yépez, co-founder and managing director, ForgePoint Capital.

NIST CSF 2.0 and the State of Cybersecurity

Tom Field  •  May 6, 2024

The feds have expanded regulations for cybersecurity with the long-awaited NIST CSF 2.0 standards, and the new guidelines place more emphasis on overall risk management, as well as the "outsized role of identity in the context of a zero trust security posture," said Rohit Ghai, CEO, RSA.

Israel's 8200 Alumni Association: A Cybersecurity Incubator

Tom Field  •  April 9, 2024

Unit 8200 is the Israeli Intelligence Corps unit of the Israel Defense Forces responsible for - among other tasks - counterintelligence and cyberwarfare. Chen Shmilo heads the 8200 Alumni Association and sees it as a hotbed for cybersecurity innovation and leadership.

RSA Conference 2024 Preview: 'The Art of Possible'

Tom Field  •  April 8, 2024

"The Art of Possible" is the theme of RSA Conference 2024, and event organizers Linda Gray Martin and Britta Glade say they may have put together the best agenda yet - featuring sessions and speakers on red-hot topics such as identity security, cloud, gen AI and operational technology.

'Materiality' and the Weaponization of SEC Reporting

Tom Field  •  December 15, 2023

Public companies must soon meet the SEC's material incident reporting requirements. Already, one ransomware threat actor has tried to report a victim for not reporting an attack. Veteran security leader Edna Conway opens up on how to approach materiality and the weaponization of reporting.