Mobilizing the C-Suite

Frank Riccardi

Description

Cyberattacks are more destructive than ever, but your C-suite can stop them. This book tells you how.

Cyberattacks are worse now than ever before. To defeat cybercriminals, companies must focus on the low-hanging fruits of cybersecurity. It’s all about the basics. Companies laid low by ransomware failed to practice good cyber hygiene by recklessly allowing weak or reused passwords, not turning on multifactor authentication, or neglecting to install patches to known software vulnerabilities.

Adding insult to grievous injury, many companies failed to mitigate cyber doom by not encrypting their devices, not implementing a data backup plan, or the mother of all blunders, not training their workforce on basic cyber hygiene.

Worse still, hidden risks abound for the unwary. A devastating cyberattack is just moments away when C-suite leaders close their eyes to the hazards of shadow IT, data offshoring, mobile devices, and social media.

Mobilizing the C-suite: Waging War Against Cyberattacks was written to galvanize C-suite leaders into deploying the basic cybersecurity controls vital to defeating cyberattacks, and to support frontline cybersecurity professionals with companywide cyber hygiene training. Most importantly, the book was written to introduce real-world cybersecurity principles to college students—if our future generation of company leaders enter the C-suite with cyber-savvy, then destructive cyberattacks are not a foregone conclusion.

Sujets

• Information Technology
• Computers
• Industries
• Informatique
• Computer crime
• Economics
• Business

Informations

• Publié par: Business Expert Press
• Date de parution: 06 mars 2023
• Nombre de lectures: 1
• EAN13: 9781637424254
• Langue: English
• Poids de l'ouvrage: 1 Mo

Extrait

Mobilizing the C-Suite
Mobilizing the C-Suite
Waging War Against Cyberattacks
Frank Riccardi, JD, CHC
Mobilizing the C-Suite: Waging War Against Cyberattacks
Copyright © Business Expert Press, LLC, 2023.
Cover design by Olusola Akinseye
Interior design by Exeter Premedia Services Private Ltd., Chennai, India
All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means—electronic, mechanical, photocopy, recording, or any other except for brief quotations, not to exceed 400 words, without the prior permission of the publisher.
First published in 2023 by
Business Expert Press, LLC
222 East 46th Street, New York, NY 10017
www.businessexpertpress.com
ISBN-13: 978-1-63742-424-7 (paperback)
ISBN-13: 978-1-63742-425-4 (e-book)
Business Expert Press Business Law and Corporate Risk Management Collection
First edition: 2023
10 9 8 7 6 5 4 3 2 1
To Rosa, For 23 years of marriage, whiskey nights on the patio, and countless walks with Lucy and Daisy in the rain.
Description
Cyberattacks are worse now than ever before. Cybercriminals are on the prowl and ready to go full-on goblin mode, shuttering a gas pipeline, switching off an electrical grid, or transmuting credit cards into useless scraps of plastic. To defeat cybercriminals, companies must focus on the low-hanging fruits of cybersecurity. It’s all about the basics. Companies laid low by ransomware failed to practice good cyber hygiene by recklessly allowing weak or reused passwords, not turning on multifactor authentication, or neglecting to install patches to known software vulnerabilities.
Adding insult to grievous injury, many companies failed to mitigate cyber doom by not encrypting their devices, not implementing a data backup plan, or the mother of all blunders, not training their workforce on basic cyber hygiene. Worse still, hidden risks abound for the unwary. A devastating cyberattack is just moments away when C-suite leaders close their eyes to the hazards of shadow IT, data offshoring, mobile devices, and social media.
Mobilizing the C-Suite: Waging War Against Cyberattacks is a call to arms for C-suite leaders to implement the tried-and-true cybersecurity countermeasures proven to thwart cyberattacks. In addition, this book is a handy, entertaining guide instilling fundamental cybersecurity principles to non-geek C-suite leaders.
Though written for the C-suite, this book is valuable for any leader in any sector or industry. Frontline cybersecurity and privacy professionals will find this book an essential resource for workforce cybersecurity education and training. This is also the perfect book to introduce real-world cybersecurity and data privacy principles to undergraduate and graduate college students.
Cyberattacks are an existential threat to your business. However, by focusing on the basics of cybersecurity, C-suite leaders can thwart even the most sophisticated cybercriminals and fight back against destructive cyberattacks.
Keywords
cybersecurity awareness; teaching cybersecurity; cybersecurity for executives; cybersecurity for business; cybersecurity leadership; cyber warfare; C-suite
Contents
Preface
Acknowledgments
Chapter 1 The One Reason Why Cyberattacks Are Worse Now Than Ever Before
Chapter 2 Score a Knockout With Multifactor Authentication
Chapter 3 Credential Stuffing With Reused Passwords—So Easy a Cybercriminal Could Do It
Chapter 4 Phishing Is a Cybercriminal’s Favorite Pastime
Chapter 5 The One-Two Punch: Password Management + Multifactor Authentication
Chapter 6 Got Patch?
Chapter 7 Welcome to Hackersville
Chapter 8 Me and My Shadow IT
Chapter 9 You Versus USB
Chapter 10 Data Offshoring: Out of Sight, Out of Mind
Chapter 11 Encryption Is the Ultimate Security Blanket
Chapter 12 Data Backup: Easy as 3-2-1
Chapter 13 All Eyes on Social Media
Chapter 14 Culture Eats Cybercriminals for Lunch
Chapter 15 The C-Suite Gets Sacked
Chapter 16 Mobilizing the C-Suite: Waging War Against Cyberattacks
References
About the Author
Index
Preface
In the 2016 Presidential debate, candidate Donald J. Trump responded to candidate Hilary Clinton’s claims about Russian hacking, “It could be Russia but it could be China, it could be lots of people. It could be somebody that sits on their bed that weighs 400 pounds.” I want you to hear me loud and clear: you will not be hacked by a hoodie-wearing, bed-sitting adolescent pecking away on a laptop. Cyberattacks deployed against your company will be perpetrated by smart, cunning, and highly adept cybercriminals who are financially or politically motivated in taking your business down.
Terrorist groups and criminal organizations invest in talent like any other enterprise—they even offer hacking training programs and recruit candidates who have specific cyber skillsets. What else would you expect from cybercriminal gangs trolling the Dark Web with ransomware tool-kits on sale for less than a C-note payable in bitcoin? Purveyors of ransomware-as-a-service (RaaS) need experienced software developers, and good talent is so hard to find these days….
It goes without saying no industry is safe from cyberattacks. Cybercriminals care not if you are a head-banging rock n’ roller or a country music fan, a wealthy aristocrat or someone living on food stamps, a lifelong vegetarian, or a ravenous carnivore about to scarf down a Big Mac. Cybercriminals are hell-bent on stealing your personal data, business secrets, or shuttering your company’s network with destructive malware until a ransom is paid.
Even worse, cybercriminals have no compunction about deploying cyberattacks to maim and kill in order to achieve religious or political goals. Guilty feelings? Nope. Cybercriminals have no qualms about launching devastating ransomware attacks to blackmail organizations for personal gain.
Companies worldwide are operating in a cyber minefield against threat actors with the financial and intellectual firepower to wipe out businesses and obliterate critical infrastructure to an extent that rivals conventional warfare. Simply put, cyberattacks are an existential threat to your business.
No one knows this better than Jamie Dimon, Chief Executive Officer (CEO) of the financial services giant JP Morgan, warning in his 2018 Letter to Shareholders, “The threat of cyber security may very well be the biggest threat to the U.S. financial system.” But Mr. Dimon is not alone in his fears about cybersecurity. At a congressional hearing in 2021, the CEOs of Citigroup, Goldman Sachs, Morgan Stanley, and Wells Fargo warned cyberattacks are the greatest threat to their organizations and the financial system at large.
Even Federal Reserve Chair Jerome Powell has freak-out moments over cybersecurity. At the Semiannual Monetary Policy Report to Congress in July 2021, Senator Jon Ossof asked Mr. Powell what he believed were “the greatest systemic threats to financial stability in the U.S. or globally.” Mr. Powell did not skip a beat, “I’d have to say that the thing that worries me the most is really cyber risk. We haven’t had to face a significant cyber event from a financial stability standpoint, and I hope we don’t, but that’s the thing I worry the most about. We have a playbook for bad lending and bad risk management, and we have a lot of capital in the system. But, you know, cyber as you see with the ransomware issues now, it’s just an ongoing race really to keep up.”
Let that sink in a bit. COVID-19 is ravaging the planet, supply chains are broken, climate change threatens the world, the specter of recession is rising—and yet Mr. Powell’s biggest worry is ransomware!
Mr. Powell is right to sleep with one eye open on cybersecurity, given that the ransomware epidemic continues unabated. C-suite leaders are likewise painfully aware of the countless cyberattacks raging across the planet wreaking havoc with massive data breaches and network shutdowns. It’s no wonder C-suite leaders are bone-chilling, freaked-out terrified about the impact a vicious cyberattack could have on their company, employees, and customers.
A massive data breach or physically destructive cyberattack will result in a public relations disaster, not to mention lawsuits, fines and penalties, and the personal humiliation of company executives who failed to do enough to prevent a cyber catastrophe from happening. Fear is a perfectly rational state of being for C-suite leaders, who have the duty and privilege of safeguarding the organization’s most precious of assets—terabytes of personal, financial, or health data whose loss would devastate the lives of their customers, colleagues, and the community writ large.
This book was written to help C-suite leaders navigate their organization through today’s uncharted waters made more treacherous by a global pandemic and the tenaciousness of cybercriminals. However, this book is useful for all leaders of an organization—be they managers, directors, vice presidents, or board members—who seek practical steps to thwarting cybercriminals by building a cyber-resilient company. This book will provide leaders with awareness of cyber risks and cybersecurity best practices so they can fully discharge their managerial and fiduciary obligations to the organization.
To beat back the cybercriminals, companies must focus on the low-hanging fruits of cybersecurity. It’s all about the basics. If you can’t get the simple stuff right, nothing else will matter—not a billion-dollar budget, not thousands of cyber-deployed staff, not even bleeding edge countermeasures using machine learning and artificial intelligence will stop a devastating cyberattack.
Like COVID-19, ransomware is an epidemic blazing across the globe. Go ahead and google ransomware cyberattacks and you will find scores of world-class companies hacked nearly to the brink of death by network encrypting malware. Then, dig a little deeper, and yo