Looking at the distinctions between Cyber Threat Intelligence (CTI) and cyber risk - both with similar elements with supportive properties, but often misunderstood. Offering definition to aid practitioners, auditors, regulators and boards.
Challenges to the blending of Cyber/Fraud/AML spaces in financial services gives cybercrime more room to maneuver. Criminals find monetisation advantages in victim organisational separations, with innovative solutions based on careful observation and rapid growth in operational maturity. This post uncovers difficulties financial services encounter in cybercrime-monetisation.
Issues - regardless of scale - often acquire similar responses when the systems are complex. This post looks at components of complex system issue response and reasoning behind it.
Some things are bent to suit. Some are broken in process. Some things just have to burn. The following are considerations for metaphorical implications.
At opposite ends of the intelligence spectrum, need-to-know (limited audiences) and need-to-share (expansive audiences) vie for dominance. Here we define these practices, associated concerns, and circumstances where one approach is likely preferable.
Cyber criminals' business models are evolving, often drawing on practices borrowed from the very businesses they attack. This should give hope to the victims of cyber crime because a more structured and formalised cyber crime marketplace is easier to scrutinise, realign, regulate, and possibly decimate, especially if state actors get involved in countering strategies.
Whether rational, rationalized, emotional, irrational, or intuitive, our behaviours are signals to others about where we are operating from. Taking time to clarify your understanding of your internal mechanisms at play will significantly improve your messaging to the external world. Messaging as revealed by your behaviours and decisions.
Private-sector organisations have different response options available utilising CTI than governments or militaries. Learning what is important to the organisation affects what to look for when distilling and analysing. This post will help understand how to create CTI relevance for the business.
Developing operational resilience - an organisation's ability to continue functioning through failure - requires reconsidering what brings the effect of shock and volatility closer to zero. Looking to the relative resilience in place twenty or more years ago, the need for analogue solutions in digital spaces becomes apparent.
Conversations on authenticity in professional environments are becoming more common, recognising a need to address inauthenticities in business. The challenge is the degree of misinterpretation fostered, as considering certain factors reveal consistency requiring adjustment depending on scale. The Dark Knight's Joker will help demonstrate.