Intelligent CISO Issue 30 | Page 46

Failing to adopt a shared responsibility model will ultimately lead to a higher level of risk and poorer overall security .
industry unlocked
When considering challenges here , testing the interconnectivity between production systems can sometimes be trickier , especially in cases where uptime is continuously required .
Are there any specific processes or tools that organisations should adopt to reduce the risk of insider threats ?
Asking routine questions when monitoring operations is crucial , such as ‘ does this activity match with usual operations practices ?’ As well as questioning outsider behaviours , this should also apply to insider activity . For example , security teams should look into insider attempts to access unauthorised assets . This will help them to identify any unusual activity or anomalies and flag any potential threats .
How can organisations best detect and respond to breaches ?
It ’ s key that teams have a comprehensive understanding of the overall energy sector , as well as the production environment within it , to ensure optimal governance .
In Operational Technology ( OT ) spaces specifically , it ’ s essential to use consistently reliable technologies to mitigate the risk of an outage . Data diodes , for example , play a vital role in separating different network segments .
How can organisations ensure that the personal data of customers is protected ?
Our recent research showed that 52 % of companies using cloud services have had user data stolen in a breach – highlighting that data security is as crucial as ever . When it comes to customer data , organisations need to have reasonable measures in place . Self-questioning around whether existing measures meet the necessary standards and regulations is vital . Organisations need to challenge themselves and hold themselves accountable for the protection of data . u

Failing to adopt a shared responsibility model will ultimately lead to a higher level of risk and poorer overall security .

46 Issue 30 | www . intelligentciso . com