Connect with us
European Gaming Congress 2024

Latest News

A FinTech CISO’s view on challenges and opportunities in InfoSec for 2024

Published

on

 

Embracing Change: The Future of InfoSec in 2024 by David Scholefield, Chief Information Security Officer at Demica

As we look forward to the security landscape in the latter half of 2024, it’s clear that Chief Information Security Officers (CISOs) will face new challenges and opportunities. The InfoSec field never remains static, and CISOs must stay ahead of the curve to manage evolving cyber threats, legislative changes, and increasing demands from stakeholders.

The Dynamic InfoSec Environment

Cybercriminals, regulatory shifts, and demanding stakeholders are pushing CISOs to maintain heightened vigilance in an increasingly hostile environment. The primary focus for CISOs is to protect the value their organizations create while staying agile to leverage technological advancements.

Advertisement
Stake.com

With the increase in the number and sophistication of cyber threats, balancing protection and opportunity will be more challenging. However, by focusing on a few key strategies, CISOs can achieve significant InfoSec victories by year-end.

InfoSec as a Collaborative Effort

The notion that people are the weakest link in InfoSec is an oversimplification. Blaming colleagues for security missteps overlooks the systemic issues that put them at risk. While awareness training can mitigate some risks, it’s crucial to design work processes that support secure behavior without compromising flexibility and creativity.

Mistakes will happen despite good controls and intentions, so implementing defense in depth is essential to prevent one error from causing significant damage. Blaming individuals for inevitable mistakes is unproductive. Instead, understanding their roles and processes to build appropriate controls is more effective.

Rather than relying solely on training, which lacks evidence of standalone effectiveness, threat modeling the riskiest roles and processes to devise targeted controls can significantly reduce risk. InfoSec should not be centralized in a single department but integrated throughout the organization, with everyone contributing to security efforts.

Advertisement
Stake.com

Preparing for AI’s Impact

Ask any CISO about their biggest challenge, and many will point to complexity. As technology evolves rapidly, the challenge of staying abreast of new developments is daunting. The rise of AI represents a significant shift that will divide organizations into adopters and non-adopters, with the latter quickly falling behind.

AI brings risks related to privacy, intellectual property, ethics, and bias, but it also offers tools for intrusion detection, secure coding advice, and vulnerability management. CISOs must balance managing AI’s risks with leveraging its potential to enhance InfoSec programs and business outcomes.

Compliance as a Strategic Tool

Compliance is often seen as a checkbox exercise rather than a strategic asset. However, adopting standards like ISO/IEC 27001 can drive real improvements by providing expert guidance on InfoSec practices. Genuine compliance implementation can enhance protection and InfoSec outcomes, leveraging decades of expertise.

Advertisement
Stake.com

Compliance standards can also be valuable in assessing suppliers, ensuring they meet rigorous security criteria. By adopting a comprehensive approach to compliance, CISOs can significantly enhance their security programs.

Evolving CISO Roles and Reporting Lines

In 2024, the trend of CISOs reporting directly to the board will accelerate, reflecting the strategic importance of InfoSec. This shift acknowledges the potential conflict of interest when CISOs report to CTOs or CIOs and emphasizes the need for InfoSec to be a strategic consideration in organizational governance.

CISOs should continually assess their reporting lines, providing advice on how changes can enhance their effectiveness and contribute to strategic decision-making. This trend will see CISOs playing a more integral role in shaping organizational direction.

Source: intelligentciso.com

Advertisement
Stake.com

The post A FinTech CISO’s view on challenges and opportunities in InfoSec for 2024 appeared first on HIPTHER Alerts.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Latest News

Hong Kong Boosts Fintech Scene with Focus on DeFi and Metaverse

Published

on

 

The Hong Kong government is now concentrating on decentralized finance (DeFi) and metaverse technologies to bolster its global fintech reputation.

Recent insights from the Hong Kong Institute for Monetary and Financial Research (HKIMR), the research arm of the Hong Kong Academy of Finance (AoF), back this strategic shift.

According to the HKIMR report, the DeFi sector has seen remarkable growth, with its market capitalization surging from $6 billion in 2021 to over $80 billion in 2023. Despite this rapid expansion, DeFi still accounts for only 4% of the overall crypto-asset market. The report indicates that over 70% of crypto businesses have yet to fully explore DeFi’s potential.

Advertisement
Stake.com

The report also highlights the challenges DeFi faces, such as governance, compliance, and security issues. However, it remains hopeful about DeFi’s ability to offer innovative financial services. These services can increase automation and financial inclusion, making them a significant component of future financial systems.

Metaverse Engagement Among Financial Institutions

Another report from HKIMR delves into the metaverse, showing a moderate level of engagement from Hong Kong’s financial institutions. Despite the interest, more than half of the respondents (51%) expressed doubts about the metaverse’s future potential. Nonetheless, certain segments of Hong Kong’s fintech sector are actively exploring metaverse-related developments, signaling a growing recognition of its potential.

Enoch Fung, CEO of the AoF and executive director of the HKIMR, commented on the integration of emerging technologies with financial services.

“The emerging technologies of DeFi and the metaverse, which are closely connected to the broader virtual asset and Web3 developments, will likely present various opportunities for the financial services industry in Hong Kong.”

Promoting Hong Kong in the International Tech Scene

Hong Kong officials are actively promoting the city as a premier destination for fintech and Web3 startups. They participated in the Collision 2024 tech conference in Toronto, highlighting Hong Kong’s readiness to serve as an offshore technology hub for Canadian crypto and Web3 businesses. This event was co-hosted by the Hong Kong Economic and Trade Office in Toronto (Toronto ETO), Invest Hong Kong (InvestHK), and StartmeupHK (SMUHK).

Advertisement
Stake.com

Despite its efforts to position itself as a crypto-friendly hub, Hong Kong has seen a series of crypto exchange closures. In March 2024, HKVAEX, allegedly linked to Binance, withdrew its license application. This was followed by the exits of IBTCEX, QuanXLab, Huobi HK, Gate.HK, OKX HK, and Bybit (Spark Fintech Limited) in May. As a result, 17 virtual asset trading platforms remain on the application list, with 11 companies withdrawing or returning their license applications.

The withdrawal of license applications has sparked concerns about Hong Kong’s cryptocurrency licensing system. Hong Kong Legislative Council member Wu Shuo has publicly criticized the system, claiming it undermines market confidence. These recent closures and withdrawals underscore the challenges crypto businesses face in navigating Hong Kong’s regulatory environment.

Source: coinfomania.com

The post Hong Kong Boosts Fintech Scene with Focus on DeFi and Metaverse appeared first on HIPTHER Alerts.

Advertisement
Stake.com
Continue Reading

Latest News

Auto industry product liability and recall

Published

on

 

India’s automobile sector has recently seen a surge of incentives aimed at attracting investment, increasing capital expenditure, and boosting domestic value addition in auto manufacturing. These policies, which include tariff reductions, duty waivers and concessions, production-linked incentives, and consumer subsidies, also bring statutory liabilities, increased regulation, and heightened oversight.

This comes amidst rising reports of manufacturing defects. Between 2012 and 2023, India documented over 5 million “moderate to serious” incidents, primarily involving fossil fuel-dependent vehicles. More recently, incidents involving electric vehicle (EV) motors catching fire have raised concerns about the safety, suitability, and adequacy of stress testing new technologies for India’s climatic and driving conditions.

Regulatory Interventions and Their Impact

Key regulatory measures include a new product liability regime with significant implications for original equipment manufacturers (OEMs) and other stakeholders in the value chain, such as component suppliers, dealers, distributors, and service providers. Significant developments include updated technical standards in manufacturing, enhanced safety norms for vehicles, and the empowerment of governmental authorities to initiate investigations, impose penalties, and order product recalls.

Advertisement
Stake.com

The Motor Vehicles (Amendment) Act, 2019 (MVA), authorizes a designated authority to recall vehicles when a defect affects the product safety of a specific number or percentage of annual sales. The MVA permits designated officers to inspect manufacturers’ premises and review records and procedures. Non-compliance with manufacturing specifications, technical standards, and safety norms can lead to vehicle recalls and penalties. The MVA holds directors and officers vicariously liable for the company’s actions, including non-executive directors who approve contravening acts through board decisions.

Enhancing Safety and Consumer Protection

While the MVA enhances manufacturing safety, the Consumer Protection Act, 2019 is consumer-focused legislation addressing product liability. It shifts the burden of proof from the consumer to the manufacturer and seller to disprove liability for specified defaults.

Implications for OEMs and Component Manufacturers

These regulatory changes require OEMs to certify that new vehicles meet improved technical standards and safety norms, involving additional testing, mandatory anti-hazard safeguards, smart management systems to prevent overcharging and short circuits, and comprehensive warranty support.

Japanese companies, among others, must note that OEMs and component manufacturers are subject to presumptive liability. The regulatory amendments necessitate OEMs to review and update product testing and commissioning processes, enhance compliance, conduct audits, and perform thorough vehicle risk assessments. Manufacturing processes must be thoroughly documented. OEMs must ensure adherence to safety norms, pre-certification, and warranty coverage, while drafting carefully worded liability management provisions in supply contracts to apportion statutory liability and costs to component manufacturers and other parties.

To mitigate product liability, OEMs should implement comprehensive and robust quality controls and testing measures throughout the manufacturing lifecycle. Third parties should conduct testing and validation, and OEMs must maintain detailed records to demonstrate due diligence and transparency. With statutory powers allowing for investigations, document reviews, and procedure recordings, OEMs must prepare for business disruption risks and potential breaches of confidentiality.

Advertisement
Stake.com

Strategic Recommendations

OEMs should regularly audit suppliers and track parts to identify defective vehicles, facilitating the assignment of liability and costs. Board procedures must be rigorous, ensuring nominees fulfill their fiduciary duties. Insurance policies must cover product liability and recall.

OEMs should develop clear escalation procedures and crisis management plans, and establish robust contracts with suppliers and partners that include warranties, indemnities, and allocated responsibilities.

Cost Implications

In the near term, these measures may increase manufacturing costs in India. Given India’s highly competitive and price-sensitive market, OEMs might find it challenging to pass these costs onto consumers.

Source: law.asia

The post Auto industry product liability and recall appeared first on HIPTHER Alerts.

Advertisement
Stake.com
Continue Reading

Latest News

Jumio Study: Deepfakes, Fraud Fears Drive Demand for Stronger Bank Security

Published

on

 

A recent study by Jumio, an AI-driven identity verification and compliance solutions provider, has revealed that 78% of consumers in Singapore are prepared to switch banks due to insufficient fraud protection.

The Jumio 2024 Online Identity Study highlights the increasing concern among consumers about their banks’ ability to protect them from fraud. The study found that 75% of consumers globally, and 78% in Singapore, would consider changing their banking provider if fraud protection was inadequate.

Surveying over 8,000 adults across the United Kingdom, United States, Singapore, and Mexico, the study reveals that 75% of consumers hold their banks ultimately responsible for safeguarding against cybercrime and fraud.

Advertisement
Stake.com

The rising sophistication of fraud tactics, such as deepfakes and voice cloning, has intensified these concerns. Deepfake technology, in particular, is being used more frequently to deceive consumers into divulging sensitive information, significantly contributing to their anxiety.

In Singapore, 78% of respondents are especially concerned about their bank’s efforts to combat deepfake-powered fraud, compared to the global average of 67%. Additionally, 74% of Singaporeans call for stronger cybersecurity measures, surpassing the global average of 69%.

The expectation for financial institutions to provide robust fraud protection is increasing, with three-quarters of consumers expecting a full refund if they become victims of cybercrime.

Source: fintechnews.sg

The post Jumio Study: Deepfakes, Fraud Fears Drive Demand for Stronger Bank Security appeared first on HIPTHER Alerts.

Advertisement
Stake.com
Continue Reading

Trending