Intelligent CISO Issue 21 | Page 10

news Mimecast research finds data loss is primary concern for financial industry imecast has announced new research commissioned by IDG Research on the factors leading financial services organisations to reprioritise how they manage compliance. Financial services organisations like retail banks, investment firms and insurance companies have always operated under stringent regulations and controls. However, increasing regulatory frameworks and evolving security threats are making compliance an increasing priority within these organisations. M Mimecast and IDG Research surveyed financial services professionals to understand their compliance efforts and what they consider critical priorities. Nearly all respondents (92%) reported that compliance management has become an increasingly high priority over the past two years. Organisations’ compliance strategies for supervision in the coming year are being shaped most heavily by new regulatory requirements (45%) and a growing number of cybersecurity threats (39%). When asked which compliance regulations will have the largest impact over the next 12 months, respondents noted those related to third-party collaboration, cloud storage and legislative orders such as Brexit, GDPR and MIFID II. Regardless of industry, data loss is an ongoing struggle most organisations face. For the financial organisations surveyed it’s the number one concern, largely due to the ever-evolving threat landscape. More than half (58%) cited data loss as their organisation’s biggest concern regarding non-compliance and 49% said their organisation had been impacted by data loss in the past two years. 10 During the Operation Blackout simulation, red and blue teams faced off in a strategic duel CYBEREASON LEADS OPERATION BLACKOUT HACK SIMULATION EVENT IN LONDON ybereason, creators of a leading cyberdefence platform, and former members of the British Government and the Metropolitan Police, came together at Operation Blackout in London. The inaugural London event was a simulation of a hack in a fictitious UK city, Adversaria. C During the Operation Blackout simulation, red and blue teams faced off in a strategic duel. The red team, led by Yossi Rachman, Cybereason’s Head of Security Sesearch, and other hackers, was determined to disrupt voting on election day in the made-up British city. The blue team, tasked with defending the city, led by Alessandro Telami, a Senior Director at Cybereason, also included former members of GCHQ, the Foreign Office and the Metropolitan Police. The goal of the table-top exercise was to examine and advance the organisational responsiveness of government entities to an anarchic group’s attempts to undermine institutions and systems of governance. To date, most other election hacking discussions and exercises focus on the mechanics and minutiae of hacking election equipment or contaminating and violating the integrity of voter rolls. Israel Barak, Cybereason’s Chief Information Security Officer and Operation Blackout London White Team Leader, said both teams performed well but the blue team scored a ‘clear victory’ because it was able to maintain its goals of limiting disruptions and maintaining normalcy and open and free elections. Issue 21 | www.intelligentciso.com