Welcome!

Agile Computing Authors: Elizabeth White, Pat Romanski, Liz McMillan, Yeshim Deniz, Zakia Bouachraoui

Related Topics: @CloudExpo, Agile Computing, Cloud Security

@CloudExpo: Blog Post

The CIO P (Chief Information Security Protection) Factor By @ABridgwater | @CloudExpo #Cloud

What should the CIO’s strategy be in protecting company IP and other assets in today’s mobile enterprise?

The CIO P (Chief Information Security Protection) Factor

It's easy to invent additional C-suite job title designations. We might conjure up Chief Data Analytics-Insight Officer (CDAIO - pronounced "see-day-oh") for example.

Equally, we can see that the role of the CIO quickly gained additional layers some time ago - and we now see the CSO (Chief Security Officer) quite commonly being ranked as the CIO's right hand man or woman.

IT facilitator & IT protector
With this expansion of the CIO role itself in mind (some companies won't be able to afford a dedicated CSO or will fail to formally create the role for other reasons), we should perhaps offer greater empathy, deference and respect to the new CIO who has to serve as both IT facilitator and IT protector.

Why is this? Because, quite simply, security today is definitely a business issue - and managing risk is growing in importance, according to the 2014 State of the CSO Study (conducted by IDG Enterprise).

That very study found that heads of security (whatever job title we adorn them with) are more involved in both IT and corporate/physical security decisions compared to non-heads of security (i.e. lower ranking staff), who are more involved in IT security decisions alone (i.e. without the physical/corporate element).

This suggests two things:

  • The CIO (or the CSO if he/she exists) has to place trust in the hands of the practitioners who use the software tools and platforms that are in place in terms of these individuals knowing what protection is needed where.
  • The board C-suite level of responsibility for corporate/physical security decisions is increasing.

This second point might seem comparatively obvious; but it leads us to highlight the fact that users' devices (and the increasing rise of the Bring Your Own Device practice) are creating a security risk that is increasing all the time. Every week sees another story surface on smartphone theft and the scamming tricks used by cybercriminals in ‘new' risk areas such International Revenue Share Fraud (IRSF).

The situation is so worrisome that even Europol (the EU's law enforcement police service) has started getting involved with local national European police forces - work carried out in Spain is just one example.

Which CIO strategy?
What should the CIO's strategy be in protecting company IP and other assets in today's mobile enterprise?

Note: To answer this question: managing security/addressing risks around mobile devices, BYOD was the number one security-related challenge in the coming year, cited by 54% of respondents in the IDG study.

How can the CIO protect the data center from cyber threats? How can they reduce the risks to their businesses? Is cyber security even on the CIO agenda? These are the questions that CIOs need to be asking themselves -- and, unfortunately, it appears that an unhealthy percentage of firms classed in the SME/SMB (small to medium sized business/enterprise) fail to take adequate steps to prevent themselves.

Some of the steps needed here can be quite physical and practical i.e. why use USB drives when you can use encrypted drives that come with password controls?

One of the superior models in this field is the iStorage datAshur..

The iStorage datAshur is the world's most secure, easy to use and affordable USB flash drive, employing PIN code access with military grade AES 256-bit hardware encryption. The datAshur incorporates a rechargeable battery allowing the user to enter a 7-15 digit PIN onto the on-board keypad before connecting the drive to the USB port.

Remember, some of the larger firms fail to appoint a direct CSO at all, so it falls to the CIO in any size firm to take on the responsibility for security protection -- and that means a whole lot more than basic anti-virus and/or firewall protection these days. It stretches from the risk to physical devices across to corporate phishing scams and cyber-espionage.

With a growing number of vendor options, it is necessary for vendors to produce solutions that align with business needs. But we can not sit back and rely on the vendors themselves to produce cross-platform cross-use case products -- it is the responsibility of the CIO to map his or her firm's own threat landscape out and look to engineer protection from the range of solutions currently available.

This post is sponsored by KPMG LLP and The CIO Agenda.

KPMG LLP is a Delaware limited liability partnership and is the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative ("KPMG International"), a Swiss entity. The KPMG name, logo and "cutting through complexity" are registered trademarks or trademarks of KPMG International. The views and opinions expressed herein are those of the authors and do not necessarily represent the views and opinions of KPMG LLP.

More Stories By Adrian Bridgwater

Adrian Bridgwater is a freelance journalist and corporate content creation specialist focusing on cross platform software application development as well as all related aspects software engineering, project management and technology as a whole.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by ...
According to Forrester Research, every business will become either a digital predator or digital prey by 2020. To avoid demise, organizations must rapidly create new sources of value in their end-to-end customer experiences. True digital predators also must break down information and process silos and extend digital transformation initiatives to empower employees with the digital resources needed to win, serve, and retain customers.
Early Bird Registration Discount Expires on August 31, 2018 Conference Registration Link ▸ HERE. Pick from all 200 sessions in all 10 tracks, plus 22 Keynotes & General Sessions! Lunch is served two days. EXPIRES AUGUST 31, 2018. Ticket prices: ($1,295-Aug 31) ($1,495-Oct 31) ($1,995-Nov 12) ($2,500-Walk-in)
Business professionals no longer wonder if they'll migrate to the cloud; it's now a matter of when. The cloud environment has proved to be a major force in transitioning to an agile business model that enables quick decisions and fast implementation that solidify customer relationships. And when the cloud is combined with the power of cognitive computing, it drives innovation and transformation that achieves astounding competitive advantage.
René Bostic is the Technical VP of the IBM Cloud Unit in North America. Enjoying her career with IBM during the modern millennial technological era, she is an expert in cloud computing, DevOps and emerging cloud technologies such as Blockchain. Her strengths and core competencies include a proven record of accomplishments in consensus building at all levels to assess, plan, and implement enterprise and cloud computing solutions. René is a member of the Society of Women Engineers (SWE) and a m...
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
Digital Transformation: Preparing Cloud & IoT Security for the Age of Artificial Intelligence. As automation and artificial intelligence (AI) power solution development and delivery, many businesses need to build backend cloud capabilities. Well-poised organizations, marketing smart devices with AI and BlockChain capabilities prepare to refine compliance and regulatory capabilities in 2018. Volumes of health, financial, technical and privacy data, along with tightening compliance requirements by...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...