“The 2014 Threat Landscape” was the focus of a recent Information Security Forum (ISF) presentation in New York City. The session, featuring Greg Garcia, former DHS Assistant Secretary for Cyber Security and Communications, covered the top six cyber threats for 2014. Top of the list was the “Bring your own Device (BYOD) trend in which employees can access corporate data and put sensitive information and trade secrets at risk. Other threats include data privacy in the cloud, reputational damage, privacy and regulation, cybercrime and the greater reliance on the Internet and technology.
In addition to these risks, several additional themes emerged from the presentation, which are relevant to any company working on a global scale. These include:
1. Increased focus on risk: the CIO is transforming into a Chief Risk Officer role in some organizations.
2. Importance of compliance programs: organizations today must depend on their own compliance programs rather than rule of law to deflect cyber threats.
3. Collaboration is essential: private organizations, the government, and the public must work together to share and exchange of best practices.
4. Employees pose greatest risks: Controlling employee behavior is the most difficult aspect of implementing a cyber-protection program.
5. Education is key: it is critical to communicate with and train employees, supply chain managers, and the C-suite on cyber-protection best practices.
Mitigate your Risks
CREATe.org helps organizations assess and improve practices for IP protection via a cost effective and practical service called CREATe Leading Practices for IP Protection. It includes benchmarking, tools, training and resources so that companies can put management systems in place to protect from cyber and other forms of IP theft.
CREATe.org also offers the following resources:
- Trade Secret Whitepaper: Trade Secret Theft: Managing the Growing Threat in Supply Chains.
- Model IP Policies: sample policies for companies looking to implement policies to protect IP, available in English, Chinese and Brazilian Portuguese
- CREATe Leading Practices for IP Protection: a three-step program to help companies assess and put systems in place to protect IP: CREATe Leading Practices for IP Protection. Email info@CREATe.org to learn more.