Roxane Bohin

Happy to share this article on Cybersecurity Tooling for Operational Technology by our team!😊

13

DORA compliance is becoming an exploratory journey for FSI organizations in rediscovering their digital supply chains. Hence we can reconnect with Dora the explorer.😀

14

#informationsecurity friends - don't miss this Wavestone webinar on how to take security awareness, empowerment, and activity to the next level at your firms!

3

Sopra Steria's EU Consulting Team has successfully delivered a high-quality study, addressing critical issues related to the European Citizens' Initiative (ECI), for the European Commission Secretariat-General and the Directorate for Informatics (DIGIT).   This independent study, titled 'Study on Technical Solutions for Organisers of European Citizens' Initiatives,' has been published on the European Commission's dedicated 2023 ECI review website (https://lnkd.in/ebg48nDR), alongside their periodic review report on the workings of the European Citizens' Initiative. This achievement marks a significant milestone in our commitment to supporting and driving digital transformation and innovation in Europe.   Our study examines technical solutions to streamline the online support process for EU citizens engaging with ECI campaigns. Furthermore, our report has been referenced as evidence in the European Commission's 2023 Review of the ECI, shaping the future of this vital democratic tool.   We are immensely proud of our team's dedication and expertise in delivering this study, which has far-reaching implications for the future of digital democracy in Europe. Full study => https://lnkd.in/ea3DcFYU #SopraSteria #EU #EuropeanCommission #DIGIT #ECI #EUDemocracy #Digitaltransformation #Innovation #DigitalDemocracy Cristian Talesco PhD | Domenico Orlando | Antonio Marco Monteagudo | Arsenio Perez Gavira | Cyril Lefebvre

54

2 Comments

Did you know that Wavestone is a leader in #cybersecurity? With around 20% of our global workforce dedicated to this topic, and our insightful Cyber Benchmark (link posted in the comments below), we are a go-to solution provider in this increasingly sophisticated discipline. Would be happy to connect you with the right #wavestone expert if you want to learn more!

22

1 Comment

🔑 Zero Trust: Why the rise in remote working calls for stronger commitments to Zero Trust Security   The way we work has fundamentally changed. Gone are the days of centralised offices, with more and more employees logging in from remote locations 🌍. This shift presents new challenges for cybersecurity, as traditional perimeter-based defences are no longer sufficient.   Our Wavestone article explores why the rise of remote work necessitates a stronger commitment to Zero-Trust Security (ZTS).   ZTS is a security model that assumes no user or device is inherently trustworthy👍. Every attempt to access data or systems is strictly verified, and access is granted on a least-privilege basis. Additionally, ZTS continuously monitors all activity to identify and mitigate potential threats.   Here are 3 key takeaways on why ZTS is essential for the remote work era: 🔐Zero Trust = No More Implicit Trust: ZTS assumes no user or device is inherently trustworthy. Every attempt to access data or systems requires verification, regardless of location. 👮‍♀‍Least Privilege, Maximum Security: ZTS grants access on a "need-to-know" basis. Users only have access to the specific data and systems they require to perform their jobs. 🎥Continuous Monitoring, Continuous Protection: ZTS doesn't stop at access control. It constantly monitors all activity to identify and mitigate potential threats, wherever they may originate. By implementing a Zero-Trust model, organizations can empower a remote workforce while significantly enhancing their cybersecurity posture. 💪 Interested to learn more about the benefits of Zero-Trust Security? Take a look at our article https://lnkd.in/edQiYjUb and reach out for further discussions!   #remotework #cybersecurity #zerottrust #newwaysofworking

7

🚨 Big news here... check out our latest Wavestone #CyberBenchmark, showcasing the ongoing advancements in cyber maturity across various sectors, as we do every year! 📊 I am sure it will be helpful for many of you working on your cyber roadmap :-) https://lnkd.in/eU2iRDnn This analysis includes insights from over 150 large organizations, providing a broad and representative overview (I hope!)👍 My personal top 10 metrics: 5️⃣3️⃣% is the average cyber maturity score for large organizations 6️⃣.6️⃣% of the IT budget is allocated to cybersecurity, on average 💵 1️⃣ cybersecurity expert for every 1,086 employees 2️⃣5️⃣% (only...) of cyber jobs are held by women 👥 4️⃣7️⃣% of companies have established a cyber salary policy and monitor gaps 5️⃣4️⃣% of medium and small companies are highly vulnerable to #ransomware 🔐 5️⃣0️⃣% of organizations have initiated projects to secure their #AI solutions 3️⃣8️⃣% of large organizations regularly audit their critical suppliers #TPRM 6️⃣% of large groups still use passwords for accessing #Cloud consoles... :-( 3️⃣6️⃣% of large organizations manage backups for critical assets securely ➡️ This year, significant progress has been made in two key areas: #Cloud security ☁️, driven by advancements in platform administration, and data security, closely tied to the growing challenges of #ArtificialIntelligence🔎 Unfortunately, third-party security and industrial security are still lagging behind... 📉

106

7 Comments

Has your organisation begun preparing for the latest EU cybersecurity regulation – NIS2? 💡 NIS2 represents a pivotal advancement in fostering cybersecurity and bolstering resilience across Europe's digital landscape. 🌍📲 EY can help prepare your business before the new directives come into effect in October. 📅 Find out more here - https://lnkd.in/gsbge4ZX #NIS2 #cybersecurity #digital #data #privacy

2

While multifactor authentication is a crucial component of cybersecurity, recent breaches involving Ticketmaster and Santander Bank reveal its limitations. These incidents, attributed to inadequate controls on MFA for cloud accounts, demonstrate that relying solely on MFA is insufficient. Businesses need to seek a comprehensive security strategy that includes regular audits and continuous monitoring to safeguard cloud data effectively where MFA is a component of a broader and intentional strategy.

4

📢 Exciting news: Wavestone has just unveiled the 2024 #Resilience Tooling Panorama! 🔥 It covers 6 critical functional areas (crisis response, #TPRM, cyber-resilience, inventory..), featuring over 140 vendors! 🌐 Perfect guide if you're gearing up for an #RFP in this space! 😉 #OpRes 🟢 Highlights: The report uncovers 4 crucial trends... 1️⃣ A shift towards unified platforms with robust integration capabilities 🌎 2️⃣ The rising influence of #AI and #automation (TPRM, metrics, compliance...) 3️⃣ Increasing demand for #compliance features (hey #DORA... ;-)) 4️⃣ The power of #visualization for enhanced analytics and metrics 📝 Sending a huge shoutout to Nigna Anil, Thomas Clokey, Marianna Tsigkounaki, and Roxane Bohin for this great report! 👏 The full analysis is available here 📚 #MustRead https://lnkd.in/egu3VqjP

109

2 Comments

The rapidly changing tech space, shortage of talent, geopolitical conflicts, and resulting volume and velocity of threats are impacting organizations globally. We've got to bridge this gap together!

27

Is your organisation ready for the EU Cyber Resilience Act? The #CRA is set to transform how businesses ensure cybersecurity for products with #digital elements. Join our expert-led #webinar on 29 January 2025 for actionable insights, compliance strategies, and a live Q&A session. Don’t miss this essential session—secure your spot today: https://lnkd.in/gJwczpQ3 #EURegulations #Cybersecurity

10

Our role as consultants is to help solve business challenges and our Wavestone cyber capabilities were very much at the front of my mind when I read today's report in MedTech Dive, highlighting that 'more than a third of healthcare organizations aren’t prepared for cyberattacks.' Additional survey results highlighted that: - 30% of healthcare organizations experienced a cyber attack in the last 3 years - About half of healthcare organizations that experienced a ransomware attack said the breach impacted patient data — and 34% said they failed to recover the data after the attack. - Over the past five years, there has been a 256% increase in large breaches reported If you'd like to read the article in full, I've included the link below and if you'd like to find out how you can protect your company, please get in touch. https://lnkd.in/ecMwDixB #medtech #cyber #healthcare #wavestone #wavestonelifescience

4

Infosys' privacy information management framework has achieved ISO 27701 certification 🔐! This achievement places us among select few organisations globally, leading the charge in data privacy and security. For us, privacy is a fundamental right, and we are committed to upholding the highest standards across all our operations 🤝🌐. Click to discover more on our advanced practices ⬇️⬇️ #ESG #DataPrivacy #Security #Infosys #ESGIsAnOpportunity #InfosysESG

3

Achieving cyber resilience at an enterprise level is critical. Yet despite widespread awareness of the challenges, significant gaps persist. To safeguard their organisations, executives should treat cybersecurity as a standing item on the business agenda, embedding it into every strategic decision and encouraging C-suite collaboration. Explore our 2025 Global Digital Trust Insights, which surveyed 4,042 business and tech executives from across 77 countries: https://www.pwc.com/dti PwC

19

Thank you, Vitja Gričar for your thoughtful words and for sharing my article with such insight. Your praise means a lot—not just coming from someone I know and respect as a friend but as someone I regard as one of the most brilliant minds and undoubtedly a leader in the field. Your reflections are both humbling and inspiring. I couldn’t agree more with your perspective on moving beyond outdated tools like Excel tables. The challenges we face today require a level of sophistication and adaptability that only cutting-edge tools like #RAALS can provide. As you rightly point out, these technologies don’t just address the symptoms of fraud and corruption but help organizations gain a deeper understanding of the underlying risks and vulnerabilities in their systems. Conversations like this are crucial for driving progress. I’d love to hear from others as well: What innovative tools or strategies are you leveraging to modernize compliance? Are we collectively doing enough to embrace transformative change and redefine standards in this space? Let’s continue to push boundaries and challenge the status quo together!

5

1 Comment

Are you neurodivergent and on the job hunt? Are you interested in risk management and/or cybersecurity? Have a look at this! EY is proud to announce the launch of our "Neurodiversity Centre of Excellence" (NCoE) in Stockholm, set to open this Autumn. Traditional recruitment processes can often be a barrier for individuals with neurodivergent conditions such as autism, dyslexia, ADHD, and others, making it challenging to showcase their true potential. Our NCoE is designed to tailor our recruitment methods and provide a robust support system to empower neurodivergent individuals to leverage their unique strengths and thrive in their careers. The application window is now open! We encourage you to share this opportunity within your networks. --- Did you know that only 48% of individuals with neurodivergent conditions are currently employed (Source: SCB, 2019), despite a pressing demand for skilled talent across various industries? It's a pivotal moment for employers to embrace inclusivity and tap into this rich pool of potential. Are you interested in gaining deeper insights into Neurodiversity? Don't hesitate to contact me or delve into our report "Värdet av att få vara sig själv" (The Value of Being Oneself). I'll provide the link in the comments below! Daniel Brämhagen Hanna Svensson Karin Robinson Anton Borna Anja Vanhatalo Åsa Granstrand Tobias Åberg Isabella Bergvik Johanna Lindqvist Wilbrand

32

4 Comments

🚨 #CERTWavestone #IncidentResponse Check out this latest report from #CERT-Wavestone: a comprehensive analysis of one year of incident response 📊📚. This report is based on real data from the cyber attacks we managed last year. Key insights from the report: 5️⃣0️⃣% of attacks were financially motivated 6️⃣6️⃣% of attacks on large companies targeted their subsidiaries 7️⃣7️⃣% of attacks involved confirmed data theft 9️⃣0️⃣% of ransomware attacks directly or indirectly targeted backups 4️⃣0️⃣% of attacks exploited vulnerabilities on exposed websites ➡️ Interesting: In the healthcare industry 🏥, attackers gained admin access to the #ActiveDirectory. They disabled the creation of new backups 📉 and deactivated the alert system 🚫. After waiting around ten days, the ransomware attack was launched, leaving the victim without recent backups to restore operations.

62

1 Comment