CYBERSECURITY REVIEW 9 DECEMBER - JANUARYLATEST SUCCESSFULLY PROJECT There might be many project success factors, but in many organizations across industries, there might be 2 common baseline factors to make a project successful, they are `people and culture.' People are the most valuable asset, and culture is the best oil of the organization. When the two of them come together, the united power will be amplified to enable business growth in a safe and sound manner. I am fortunate to be able to work with a lot of smart and great leaders and experts in the cybersecurity domain so far. One great characteristic about them is promoting a strong and positive people connection and inclusive culture. They are able to understand the organization's business thoroughly, from strategy to execution. Understand where and how critical business assets and processes are running. Thinking and talking like a business partner is key to getting support from the business side for cyber security professionals. It is about connecting people in an inclusive way so that the cyber security risk can be well articulated in the business world. We could use the cyber threat landscape, data analytics, and risk appetite as the elements to tell a story that could be understood and adopted. Remember, talking in the jargon could only be understood within our limited cyber security teams, but not the wider business partner teams. People need to be connected and included, and after that, the project run by people could be successful. FUTURE OF THE ENTERPRISE SECURITY SPACEThere are enough talks in the industry about technological trends like cloud computing, Artificial Intelligence, Machine Learning, etc. I will not repeat these buzzwords here, but I would like to share that `quantum computing' is one of the emerging technologies I would encourage you to take a look at. Quantum computing might disrupt the foundation of today's data encryption/protection algorithm we have relied on heavily for many years in the cyber security world.In 2019, Google announced that its Sycamore quantum computer had completed a task in 200 seconds that would take a conventional computer 10,000 years. But it has not been largely commercialized yet. With the commercialization of quantum computing arriving in the long run, today's encrypt key might not be able to claim security anymore. As cybersecurity practitioners, we should keep an eye closely on these disruptive technologies, see how they will impact us, and, if any emerging solutions are coming up, how we could leverage them. PIECE OF ADVICEI am the advocate of collaboration and best practice sharing in the cyber security community. In many conferences and collaborative initiatives, there is one thing it is too common that people might overlook, but it is very important for all the stakeholders -- this is the same language. Sometimes, people might assume something for granted, and it will cause confusion if not everyone is on the same page, even on the same topic. Let me share one real-life example of the same language, which is the stock exchange's stock price color code. In the US, Europe, and Singapore, we know the green color means the stock price is up, and the red color means the stock price is down. But if you go to exchanges in China, Taiwan, and Japan, you will find they are following the other way; that red color means the stock price is up and the green color means going down. And if you go to Korea's exchange, you will find, for them, red color means going up, but blue color means going down. So, the same color might have completely opposite meanings in different countries. So, let us use the same language with the same meaning to avoid confusion. As cybersecurity practitioners, we should keep an eye closely on these disruptive technologies, see how they will impact us, and, if any emerging solutions are coming up, how we could leverage them
< Page 8 | Page 10 >