Intelligent CISO Issue 51 | Page 72

GO PHISH
COVID-19 presented a huge uptake in people changing the way they work , with the hybrid model now seeming the overwhelmingly favoured way that things are going to be in the coming years .

GO PHISH

What do you currently identify as the major areas of investment in the cybersecurity industry ?
Again , it needs to be about getting the basics right . Cybersecurity awareness and training in the awareness need to be far more commonplace than it

COVID-19 presented a huge uptake in people changing the way they work , with the hybrid model now seeming the overwhelmingly favoured way that things are going to be in the coming years .

currently is . The SME sector needs to start putting more thought into IT training of all types and across the board .
Are there any differences in the way cybersecurity challenges need to be tackled in the different regions ?
I don ’ t think so , because the issues that are caused by cyberthreats are universal whether the victim of an attack is based in Europe , the Middle East , Asia or the Americas . For the most part , users are simply not taking cybersecurity and the effects of it seriously enough and that needs to change .
What changes to your job role have you seen in the last year and how do you see these developing in the next 12 months ?
Wow ! Well , it ’ s obviously been a massive two years for Digital Transformation because of the pandemic . COVID-19 presented a huge uptake in people changing the way they work , with the hybrid model now seeming the overwhelmingly favoured way that things are going to be in the coming years .
Obviously , hybrid working is here to stay and will develop over the coming years , but I think in the immediate future we need to work hard getting the workforce to catch up with the technological advancements . We ’ ve seen huge steps forward in technological improvement and for once the humans need to catch up . I see businesses investing heavily in IT training , a huge range of tools and technologies have been made available , but to people who have no idea how to use them .
What advice would you offer somebody aspiring to obtain a C-level position in the security industry ?
I think the most important thing for them to have above any kind of qualification is experience . I see a lot of C-level IT directors that have never been in a technical role before . When you ’ re working at that kind of level , you need to have experience in pretty much every aspect of IT and the issues that it can throw up . Working in an MSP offers huge levels of experience as the exposure to technological challenges is amazing and non-stop . u
72 www . intelligentciso . com