Corporate Cybersecurity. What has changed in recent years? Presentation held for business decision makers for them to understand the paradigm change from traditional infosec towards cybersecurity of today.

1. Corporate Cyber Security – what has changed?
Petri Kairinen, CEO, Nixu Oy
3.9.2014
03/09/14 © Nixu 2014 1

2. Nixu Oy – Cybersecurity specialist
Over 100 skilled experts enable one-stop-shop
Clients include 63 % of Finland Top-100 companies !
03/09/14 © Nixu 2014
Security solutions for
Digital business
Largest team in the Nordics
Security solutions for
Corporate and IT security
Security solutions for
Industrial internet
Advisory – Implementation – Assessment – Continuous Service – Resource Hire
2

3. Paradigm change:
from information security to cyber security
Office
support
systems
03/09/14 © Nixu 2014
Industrial
internet,
digitalized
business
Walled
garden
Partners,
M&A
and
cloud
&
mobility
Random
viruses
Targeted
a@acks
with
business
gain
in
mind
3

4. Information security Information security Information security
Subcontractors
Suppliers
Outsourced support
functions
Building automation
Subcontractors’ control
systems
Outsourced control
systems
Enterprise Resource
Planning Systems
Production automation
Customer
Automation
of the final product
(e.g. remote-controlled
systems)
Enterprise
Management
Production
Support functions
Privacy
Cyber security Production systems Information systems
Society
Cybersecurity in enterprise context
03/09/14 © Nixu 2014 4

5. Some things haven’t changed!
CONFIDENTIALITY
INTEGRITY
AVAILABILITY
03/09/14 © Nixu 2014 5

6. So, what has changed?
§ 59 % of organisations cite an increase in external threats.
– Ernst & Young: “Global Information Security Survey 2013”
§ 81 % of large organisations had a security breach last year.
– Department for Business Innovation & Skills: “2014 Information
Security Breaches Survey”
§ Only 33 % of victims discovered the breach internally.
– Mandiant: “2014 Threat Report: M-Trends - Beyond the Breach”
§ 75% of attacks use publicly known vulnerabilities in commercial
software that could be prevented by regular patching.
– CyberEdge Group: “2014 Cyberthreat Defense Report”
03/09/14 © Nixu 2014 6

7. Case: Target
§ Target is the second largest
retailer in the USA
§ Target had a massive security
breach at the end of 2013
§ Breach originated from supplier
of air conditioning systems
§ Data of 40M credit cards and
70M other privacy data were
stolen
§ Target estimated losses of 61 M$.
§ Target CEO resigned on May
2014.
03/09/14 © Nixu 2014 7

8. Evolving external threats for corporations
Evolving
digital footprint
shift the risk
base
03/09/14 © Nixu 2014
Governmental
espionage
Targeted
a2acks
Mass
virus
a2acks
Typical
historical risk
appetite
(security
5 % share of
IT budget)
8

9. Nixu prediction: must have’s in Corporate IT
– within the next 3 years
Management
System
for
InformaFon
Security
SituaFonal
Awareness
Link
to
key
Processes
Advanced
Technology
Pre-requisites Must have’s
03/09/14 © Nixu 2014
9

10. Thank you!
Petri Kairinen
Petri.kairinen@nixu.com
+358 40 8321 832
@kairinen or @nixutigerteam
www.nixu.com
03/09/14 © Nixu 2014 10