Influencers, CISO ‘Language’ Top December News

There have been a number of trends in cyber security in 2017, namely an uptick in the size and scale of breaches. What was once an isolated or amateur incident could now be a part of a widespread, coordinated offensive. The culprits, of course, could be anyone, or anywhere. These nameless hackers have wreaked havoc on all types of enterprises.

December, like most months, was brimming with cyber incidents – some high-profile while others flew under the radar. What’s more, different defense mechanisms have emerged, some of which involve “soft skills” and being “bilingual” in the sense of IT and business. Other details came to light, too, including revision plans for the NIST Cyber Security Framework – under public comment until mid-January. New regulations also geared up for implementation and, again, the talent crisis was broken down.

In that spirit, what follows is an in-depth look at the month of December and the cyber security headlines that stole the show.

Our Top 5 Influencers In Cyber Security

The Cyber Security Hub editorial staff compiled a list of the “sites and sounds” we think all audiences should be following. Here are five of the best content creators and sharers on the web and in the blogosphere, in our opinion.

CISOs Must Be ‘Bilingual’: Speak IT & Business

The Dec. 11 episode of “Task Force 7 Radio” ran the cyber security gamut – from a defense of practicing CISOs, to complicated research variables, to a company’s risk profile. Host George Rettas broached the topic of the sweeping Uber hack, along with the startling skills gap. He was joined by Cyber Risk Research Founder, Mark Clancy.

Substantial NIST Revisions Eye Supply Chain, Analytics Security

This month, NIST announced the second draft of a measure set to update the Cyber Security Framework (CSF). Version 1.1, Draft 2 is set to clarify certain areas of NIST as it affects the larger cyber security operations of the enterprise. NIST also released an updated draft to Roadmap to the Cyber Security Framework, outlining cross-sector efforts to support the document.

‘Tech Won’t Run Itself’: Analyzing Cyber Security’s Talent Crisis

The Dec. 4 episode of “Task Force 7 Radio” tackled both the debilitating talent crisis in cyber security and the “mega”-breach at Uber. Host George Rettas also dedicated time to the diplomatic crisis in the Middle East – involving a Qatari cyber-attack – and details surrounding the HBO data heist. On the cyber security skills gap, the focus of half the show, Rettas said the space is dealing with a “must-win battle.”

Tick, Tock: New SWIFT Security Regs Take Hold Jan. 1

SWIFT, a widely used global banking platform, will be implementing a new cyber security framework that is poised to pad protection for 11,000 institutions across more than 200 countries. Come Jan. 1, 2018, the financial institutions that use SWIFT will be subject to the platform’s new Customer Security Controls Framework, which is being described as a “baseline” of security for both enterprises large and small.

Similarly, click here for a look at the biggest headlines of November 2017!