Modern CISOs have a new task cut out for them: determining how to navigate AI as both challenge and opportunity.

The post CISOs Reconsider Their Roles in Response to GenAI Integration appeared first on Security Boulevard.

Stagnating security budgets and mounting job pressures are weighing on CISOs, a quarter of whom expressed discontent with their salary and overall compensation.

Show me the money: The average total compensation for tech CISOs stands at $710,000.

The post One in Four Tech CISOs Unhappy with Compensation appeared first on Security Boulevard.

Safeguarding software integrity is crucial, especially in vital industries such as finance. According to a report by Carbon Black, the financial sector experiences an average of 10,000 security alerts per day, outstripping most other industries. As the technology landscape evolves and expands, it’s imperative that your defenses strengthen alongside it. 

So, how do leading financial institutions shore up their cyber defenses and protect their software assets? The answer is Application Security Posture Management (ASPM). Join us as we explore ASPM's transformative impact on security practices in the U.S. financial services sector.

The post Securing the Vault: ASPM’s Role in Financial Software Protection appeared first on Security Boulevard.

SecurityWeek interviews Geoff Belknap, CISO at LinkedIn, and Guy Rosen, CISO at Facebook parent company Meta.

The post CISO Conversations: LinkedIn’s Geoff Belknap and Meta’s Guy Rosen appeared first on SecurityWeek.

The majority opinion is that a cybersecurity professional body is long overdue and would benefit cybersecurity and cybersecurity practitioners.

The post Should Cybersecurity Leadership Finally be Professionalized? appeared first on SecurityWeek.

Dinesh Kumar Shrimali has become the Chief Information Security Officer (CISO) and Data Protection Officer (DPO) of Tata Steel Ltd., one of the largest and most established steel manufacturing companies globally.

Having held worldwide leadership positions in cybersecurity for over 22 years, Shrimali brings a lot of experience to his current post from his time at Welspun and UPL Ltd.

Dinesh Kumar Shrimali Excitement and Aim

Speaking about his appointment, Shrimali expressed his excitement, stating, “I am thrilled to join one of the most established and largest steel manufacturing companies and to reunite with the Tata group. My aim is to leverage the insights gained from my previous experiences to strengthen the company’s security stance.” Shrimali will be coordinating and supervising Tata Steel’s information security policies and initiatives in his new position. This entails putting in place strong security measures, carrying out exhaustive risk analyses, and creating efficient incident response plans in order to reduce cybersecurity threats. Concurrently, he will guarantee adherence to data protection statutes and guidelines, emphasizing the management and processing of personal information within the company. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

In today's digital age, where data breaches and cyber threats loom large, the role of Chief Information Security Officer (CISO) is more critical than ever. PayPal, a global leader in digital payments, has taken a significant step forward in fortifying its cybersecurity posture with the appointment of Shaun Khalfan as its new Senior Vice President and Chief Information Security Officer.

With over 20 years of extensive experience in information security and risk management across various industries, Khalfan brings a wealth of knowledge and expertise to his new role at PayPal. His appointment underlines PayPal's commitment to ensuring the security and protection of both its own and its customers' data, digital assets, and payments.

Shaun Khalfan: Industry Leadership

Before joining PayPal, Khalfan served as the Senior Vice President and CISO for Discover Financial, where he led the information security organization, implementing enhanced strategies to monitor and mitigate current and emerging risks. His tenure at Discover Financial, along with previous experience as the Managing Director and CISO at Barclays International, has equipped him with invaluable insights into the evolving landscape of cybersecurity within the financial sector. Khalfan's journey to becoming a leading figure in cybersecurity began with his education at the University of Maryland, where he honed his skills in information security. He furthered his academic pursuits with an MBA from the George Washington University School of Business, which provided him with a solid foundation in business management and strategy. In addition to his professional achievements, Khalfan's commitment to cybersecurity extends beyond his corporate roles. He serves on the board of the Financial Services Information Sharing and Analysis Center (FS-ISAC), a vital platform for collaboration and information sharing among financial institutions to combat cyber threats effectively. Furthermore, Khalfan's dedication to nurturing the next generation of cybersecurity professionals is evident through his role as an adjunct professor at Carnegie Mellon University. By sharing his knowledge and experiences, he contributes to shaping future leaders in cybersecurity, ensuring a robust talent pipeline to address the evolving challenges in the field. As an Army combat veteran, Khalfan understands the importance of leadership and resilience in the face of adversity, qualities that are invaluable in the realm of cybersecurity. His military background, coupled with his extensive expertise, allows him to approach cybersecurity challenges with a strategic mindset and unwavering determination.

Credentials and Expertise

Khalfan's credentials speak volumes about his commitment to excellence in cybersecurity. He holds certifications such as Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH), demonstrating his proficiency in safeguarding information systems and networks from malicious threats. Additionally, his graduation from the Department of Defense Executive Leadership Development Program underscores his leadership capabilities honed through rigorous military training. Beyond his professional endeavors, Shaun Khalfan is deeply engaged in the cybersecurity community. He advises several companies, ranging from Series A to D funding rounds, on go-to-market strategies and opportunities to bolster their cybersecurity defenses. His insights and guidance are instrumental in preparing these companies for eventual acquisitions and ensuring their continued success in an increasingly digital world. In his new role at PayPal, Khalfan is poised to lead the charge in strengthening the company's cybersecurity defenses on a global scale. His vision, coupled with his extensive experience and expertise, will play a pivotal role in safeguarding PayPal's infrastructure and maintaining its reputation as a trusted payments provider. In a statement on LinkedIn, Khalfan expressed his excitement about the new challenge, highlighting his admiration for PayPal's leadership team and growth strategy. "I am excited to embark on a new challenge as SVP, Chief Information Security Officer at PayPal! I am inspired by the leadership team, growth strategy, and look forward securing a digital company on a global scale," said Khalfan. With Khalfan at the helm of cybersecurity, PayPal is well-positioned to navigate the complex landscape of cybersecurity threats and emerge stronger than ever before. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

Mitel, a leading provider of business communications solutions worldwide, has announced the appointment of Bill Dunnion as its new Chief Information Security Officer (CISO).

In his new role, Dunnion will spearhead Mitel’s information security strategy, oversee security architecture, and ensure compliance with security standards. His responsibilities also include assessing, developing, and implementing industry best practices for security across the organization.

Bill Dunnion Expertise and Experience

Bringing over two decades of progressive experience across various industries, Dunnion boasts a comprehensive understanding of IT, cybersecurity, and risk management. His expertise encompasses cybersecurity trends, adherence to security standards and frameworks, as well as emerging business risks. Mitel's Chief Information Officer, Jamshid Rezaei, emphasized the critical importance of security in today's digital landscape. Rezaei highlighted that in an era where secure, reliable, and compliant digital tools are paramount, Dunnion's leadership and experience in implementing cybersecurity policies and procedures will greatly benefit Mitel. “In today's world, providing secure, reliable, and compliant digital tools, including communications and collaboration solutions, for our employees, partners, and customers is more crucial than ever. Bill’s proven leadership, combined with his considerable experience in implementing and operationalizing cybersecurity policies and procedures, is a great asset for Mitel," said Rezaei. Expressing his enthusiasm for his new role, Dunnion highlighted the ever-evolving nature of security threats faced by businesses today. He stressed the necessity for organizations to adopt agile solutions that prioritize the confidentiality, residency, and protection of critical data. Dunnion expressed his eagerness to collaborate with the combined Mitel and Unify teams to develop a cohesive and comprehensive security program for all stakeholders. "After 25 years, I am very excited to be returning to Mitel where the people are as amazing as I remember. The company's continued growth and 51-year legacy are incredible testaments to the leadership and employee commitment to excellence. I am looking forward to helping the excellent security team manage and mature the security program at Mitel," reads Dunnion's LinkedIn post.

Bill Dunnion's Professional Journey

Prior to joining Mitel, Dunnion held notable IT and cybersecurity leadership positions at esteemed organizations such as Calian Ltd, 2Keys Security Solutions, and Bell Canada. In his most recent role as Senior Director of Corporate Cybersecurity at Calian, he played a pivotal role in developing, implementing, and operationalizing the company's cybersecurity program. Dunnion ensured alignment with industry standards such as NIST, ISO, and SOC2, demonstrating his commitment to enhanced cybersecurity practices. Dunnion holds a degree in mechanical engineering from Queen's University in Kingston, Ontario, and actively contributes to the cybersecurity community as the volunteer chair of the Canadian Cyber Forum in Ottawa. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

Keepit, a global leader in SaaS data backup and recovery, has announced the appointment of Kim Larsen as its new Chief Information Security Officer (CISO). With over two decades of leadership experience in IT and cybersecurity spanning both governmental and private sectors, Kim Larsen brings a wealth of expertise to his new role. Talking about backup and recovery, Kim Larsen denoted his take cybersecurity posture, stating, “I am very happy to join Keepit: Backup and recovery are critical components of a solid cybersecurity posture, and the unique Keepit solution is the answer to so many compliance and security challenges. It’s a great opportunity to work with organizations on how to retain access to their data in the face of any malign or arbitrary threats to their infrastructure.”

Kim Larsen Expertise in Government and Private Sector

Larsen's career trajectory encompasses significant roles in esteemed organizations such as the Danish National Police and the Security and Intelligence Service (PET), where he served as a delegate for the Danish government in NATO’s and the EU’s security committees. Transitioning to the private sector, Larsen contributed his strategic insights to companies like Verizon, Huawei, and Systematic, while also serving on the information security board of the Danish Industry Confederation (DI) and the Danish Council for Digital Security. Speaking on the development Morten Felsvang, Keepit CEO said, “It's a real pleasure to welcome Kim Larsen to the team — his deep government and broad private sector experience is exceptional, and perfectly positions him to bring Keepit’s security advisory capabilities and development of future services to the next level. Our current growth trajectory and go-to-market strategy has us engaging in conversations where his expertise is highly valuable.”

Larsen Holistic Approach to Cybersecurity

Larsen's expertise extends across various domains including business-driven security, aligning corporate, digital, and security strategies, risk management, and threat mitigation. His adeptness in developing and implementing security strategies, coupled with his prowess in leadership and communication, make him a strategic asset to Keepit's mission of providing next-level SaaS data protection. Emphasizing the proactive approach necessary for cybersecurity preparedness, Larsen said, “If there’s one thing we can be sure of, it’s this: We don’t know the threats we will be facing in the future. But we can make educated guesses. And based on those, we can make sure to cross the t’s and dot the i’s that we do know about. That’s why the Keepit solution is a future-proof solution: With its vendor-independent tech stack that keeps data physically and logically separate from the production environment, it’s a guarantee that customer data is always available. And with local data centers keeping data in the same regulatory regions as the organization, full compliance is assured. It is really quite unique.” With Larsen at the helm of Keepit's cybersecurity initiatives, the company aims to reinforce its commitment to providing robust data protection solutions to its global clientele. Larsen's emphasis on compliance, security, and disaster recovery best practices underscores Keepit's dedication to staying ahead of emerging threats and evolving regulatory landscapes. Keepit's vendor-independent cloud dedicated to SaaS data protection, based on a blockchain-verified solution, offers a future-proof safeguard against evolving cyber threats. By keeping data physically and logically separate from the production environment and maintaining local data centers in regulatory-compliant regions, Keepit ensures the availability and compliance of customer data, making it a preferred choice for organizations worldwide. In his role as CISO, Larsen will lead Keepit's efforts to advance its security advisory capabilities, develop future services, and navigate the complex cybersecurity landscape with resilience and innovation. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.