Protect big data and improve your security with big data analytics
Traditional signature-based security products do not work against today's advanced threats, he says. Organisations need to use advanced security analytics and correlations that detect anomalies and deviations from baseline behaviour. At the same time, organisations can consider outsourcing to fill skill-related challenges. "Technology is only part of the solution," he writes. "The other critical part is maintaining a talented set of security and risk professionals that can harden the IT environment and fine-tune security products to accurately identify threats."
Work with the business for more pervasive risk management
Organisations fail when they do not see the full scope of risk and how it is interdependent across the business, he notes. Enterprises that build risk management programs based on narrowly-defined objectives such as Sarbanes-Oxley compliance, data security, or loss prevention often end up viewing risk management as an inhibitor to business. A more value-based perspective of risk management, he states, can be achieved with direct contributions from other business functions.
Sign up for CIO Asia eNewsletters.