By Business & Finance 
Tom Kellermann, CEO Strategic Cyber Ventures
Cyber security and cyber risk should be on every business’s radar. Deanna O’Connor spoke to international expert Tom Kellermann in advance of his visit to Dublin for the Zero Day Conference.
If you’ve been attempting to cruise through life with blinkers on to the threats to data security online, a conversation with Tom Kellermann, CEO Strategic Cyber Ventures, is illuminating. When it comes to cyber security he has worked on protecting some of the world’s most sensitive information, in a previous incarnation as Deputy Chief Information and Security Officer for The World Bank and IMF Treasury Security Team in Washington DC; he has advised central banks around the world on technology risk management and stood on Obama’s Commission on Cybersecurity, as Chair of the Threat Working Group and the International Working group.
Kellermann estimates that only 5% of companies are truly on top of their cyber security, adding, “most of these are in the financial sector and the defence industry.” At the other end of the scale he warns that, “Manufacturers and healthcare are the most exposed.”
MALWARE ON MOBILES
While the thoughts of, for instance a healthcare provider being hacked, are ominous, every business needs to be aware of the everyday risks they are exposed to, even down to something so small as employees using their mobile phones for work. He warns, “Mobile phones do pose a significant risk as the provide a gateway in which cybercriminals can leapfrog into secure corporate networks.
“In addition we have seen an explosion of malware for mobile devices this year. Hauntingly, the malware allows for the microphone and camera to be secretly activated when triggered by a calendar alert or specific location.”
Kellermann mentions some very real fears and predictions for the future of cyber risk over the coming year, listing: “President Trump’s rhetoric per China will serve to usher in a new era of Chinese hacking; Russia’s cyber attack campaign will increase due to tensions with NATO over the security of the Baltics; AQAP will demonstrate an advancement in their cyber campaigns; destructive attacks will become the new normal.”
When asked what’s keeping him awake at night at the moment, and what should be on corporations’ radars, he says, “The increase of destructive malware and attacks against corporate supply chains coupled with mobile malware is troubling.”
However advances in cybersecurity are being made all the time and he cites, “Deception technology; user entity behaviour analytics and adaptive authentication represent true advances in defence in depth,” as the best things happening at the moment.
The internet is unavoidable to anyone going about their own personal business, not to mention engaged in business. It isn’t properly policed or regulated, yet we all live in the lawless cyber world. Kellermann concludes, “The internet is a hostile and lawless environment. People do not respect the dangers because it is invisible. Individuals must defend themselves and choose the corporations they do business with wisely. Security should not be seen as an expense but rather a functionality of conducting business in 2017.”
Cyber Self-Defence Tips
- use multiple passphrases for your accounts and change these every three months and use sentences instead of passwords.
- update your OS, apps and Adobe every Tuesday evening.
- use security software for ALL devices
- never use public Wi-Fi
- change the password on home Wi-Fi router.
- use Firefox as your browser and cut and paste links in emails into it.
- turn Bluetooth off
- never use your debit card for online purchases, rather use one credit card just for online purchases
Tom Kellermann will be in Dublin for the Zero Day conference on cyber security on March 7th 2017. Visit: zerodaycon.com
