Intelligent CISO Issue 03 | Page 49

S Search online for ‘security certifications’ and you’ll either be faced with a list of accredited training bodies, ideal for those looking to obtain a professional qualification in their field, or pages about SSL and digital certificates. police the scope of documents and applications that are signed and to continually improve and enhance the validation process that these companies go through, so the bad guys don’t slip through the cracks.” Though very different, the results are equally important to those tasked with the job of protecting their organisations from cyberthreats, so we’ve spoken to experts about both. One area which GlobalSign sees emerging as a new challenge is the Internet of Things (IoT). Tasked with outlining the three main types of SSL digital certificates issued by GlobalSign, a trusted certification authority (CA), was Doug Beattie, Vice President of Product Management at the firm. The first, Domain Validated (DV SSL) Certificates, require a CA to check an applicant has the right to use a specific domain name, but no company identity information is vetted. Organisational Validated (OV SSL) Certificates are issued to those affiliated with a company or organisation, while Extended Validation (EV SSL), as the highest class of SSL available, requires companies to go through more due diligence and validation. EV SSL certificates activate both the padlock and the green address bar in all major browsers. Beattie said: “They’re really useful for e-commerce sites, insurance companies and healthcare where identity is really important to know before you just start submitting personal data and things like that. You really want to know who you are talking to.” As cyberthreats show no sign of slowing in their evolution, ‘trust’ is more important than ever. People want, and deserve, to know they’re not inputting sensitive details into a system which is compromised or potentially could be. Beattie said it was important that people could trust the website and digital signatures – certificates – have an important role to play. Doug Beattie, Vice President of Product Management at GlobalSign www.intelligentciso.com | Issue 03 FEATURE He said: “As cyberthreats start to grow, it’s becoming even more important to Beattie said: “This is going to be an explosive growth area for us in the coming years. We’ve really revamped our whole CA infrastructure over the last two years. “We’ve an entirely new set of systems – they are in our London data centre – and those are prepared to issue thousands of certificates per second.” Advice to enterprises and organisations “There are a lot of different, maybe contradictory, security requirements within larger enterprises and they need to set up decent policies and As cyberthreats start to grow it’s becoming even more important to police the scope of documents and applications that are signed. procedures for requesting and managing the certificates,” Beattie said. The other ‘certificates’ – professional security certifications In a world where cyberthreats are ever- evolving, there is a real need for trained security professionals. Professional 49