Shaping security solutions

April 2011 Cyber Security

Samresh Ramjith sheds some light on the changing face of IT security.

Samresh Ramjith
Samresh Ramjith

Operating environments are spiralling outwards to accommodate business demands for mobility, multidevice access from remote locations and real-time, in-sync information. The ability to secure our core asset – our data – and manage how this is accessed and by whom, is a major issue facing IT management today.

Dimension Data’s GM for Technology and Operations, Samresh Ramjith, sheds some light on the changing face of IT security.

Hi-Tech Security Solutions: How has evolving technology affected the IT security environment?

Samresh Ramjith: Many key businesses enabling technologies such as mobility, convergence and cloud computing introduce a completely new set of security risks. As technology evolves to keep pace with demand, security threats are matching this evolution stride for stride. Threats are growing in sophistication and magnitude with even more devastating effects on enterprise.

Advancement is fantastic for productivity. A proliferation of mobile devices such as laptops, notebooks, tablets, PDAs, smartphones and flash drives facilitate an ever-accessible and agile workforce. However, they also provide additional entry points for security threats to creep in; while cloud computing blurs the boundaries between environments and who is responsible for securing them.

These shifting parameters mean that ‘securing the fortress’ is no longer the only concern, and there is a much higher risk of sensitive data and IP leaking from supposedly ‘secure’ environments than ever before.

HSS: How does one achieve equilibrium between security and business enablement?

Samresh Ramjith: It is impossible and impractical to secure an entire environment. Firstly, it is extremely cost prohibitive. Secondly, it is just not conducive to business enablement. The CIO must balance the organisation’s appetite for business optimisation with security’s need to protect.

Technology is just one element of the ideal security strategy. In order to truly unlock its business potential, the right processes need to be in place, as well as have the right people in place with the appropriate insight and skills to bring all the components together.

The key is to identify and secure the right information, and ensure that this is only accessible to relevant individuals. IT security needs to become more integrated into the business itself in terms of creating processes, information flows and access controls that ensure that not only is business-critical data kept safe, but that information required for collaboration and interaction is readily available.

HSS: The weakest link in IT security has always been the human element. Since a business cannot eliminate this altogether, how can it be contained?

Samresh Ramjith: Changes in infrastructure mean internal threats are becoming as much of a concern as perimeter security. Mobile staff, contractors, and unintentional or malicious security breaches are difficult to contain, and the most secure vault in the world is useless if it is left open.

Encryption may provide a good first line of defence. Tighter role-based access management that limits unauthorised and unnecessary access to data will help. Ensuring that security systems are continually monitored, enforced and updated on a regular basis to ensure their efficacy often proves to be an excellent deterrent.

What is most critical is that businesses need to change the way they think about data and create a culture where people understand that data has value. Information of all kinds can be a highly profitable commodity on the black market and as such needs to be protected in the same sense as any physical asset.

HSS: Technology is becoming more strategic in general. What business imperatives are driving IT security specifically?

Samresh Ramjith: Currently, one of the key trends defining the IT space is the transformation of security from ancillary IT function to core business priority. Businesses are beginning to attach real value to the safeguarding of their information and are moving to align security and business objectives.

As governance and compliance becomes more enforceable, they are likewise driving security initiatives. Good corporate governance often works hand in hand with creating the right framework in terms of controls, shifting security into the position of business imperative. Good governance also speaks to the structure and thinking required to ensure that any threats that may be introduced by new emerging technologies are identified and addressed effectively.

The need for compliance has also introduced the concept of attaching measurability as a means of proving that appropriate controls are in place, Technology-centric, tactical actions are giving way to more structured solutions that allow security to be deployed as a KPA, with more metric-based means of tracing and monitoring its success, and in turn, return on investment for the organisation.

For more information contact Dimension Data, +27 (0)11 575 0000, www.dimensiondata.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Managing data privacy concerns when moving to the cloud
Cyber Security
While the cloud offers many business benefits, it can also raise concerns around compliance, and some organisations have taken the approach of staying out of the cloud for this reason.

Read more...
Accelerating your Zero Trust journey in manufacturing
IT infrastructure Cyber Security Industrial (Industry)
Francois van Hirtum, CTO of Obscure Technologies, advises manufacturers on a strategic approach to safeguarding their businesses against cyber breaches.

Read more...
The democratisation of threats
Cyber Security
Bugcrowd looks at some of the primary vulnerabilities the world faced in 2021, and the risks moving forward with growing attack surfaces and lucrative returns on crime.

Read more...
Protecting yourself from DDoS attacks
Cyber Security Security Services & Risk Management
A DDoS attack, when an attacker floods a server or network with Internet traffic to prevent users from accessing connected online services, can be costly in both earnings and reputation.

Read more...
Exploiting Android accessibility services
Cyber Security
Pradeo Security recently neutralised an application using Android accessibility services that exploits the permission to perform fraudulent banking transactions.

Read more...
Cyber resilience is more than cybersecurity
Technews Publishing Editor's Choice Cyber Security Integrated Solutions IT infrastructure
Hi-Tech Security Solutions held a round-table discussion focusing on cyber resilience and found that while the resilience discipline includes cybersecurity, it also goes much further.

Read more...
Keeping devices in check
Cyber Security Asset Management, EAS, RFID IT infrastructure
Kaspersky patents new technology for analysing relationships between electronic devices to counter cyberattacks launched through connected IoT devices.

Read more...
Considering cloud downtime insurance?
Arcserve Southern Africa Cyber Security IT infrastructure Security Services & Risk Management
Byron Horn-Botha, business unit head, Arcserve Southern Africa, reveals three vital steps that you must consider to ensure business continuity before you buy insurance.

Read more...
A robust OT cybersecurity strategy
Editor's Choice Cyber Security IT infrastructure Industrial (Industry)
Cyber experts are still struggling to convince senior management to spend money to protect their control system assets, resulting in a lack of even basic measures to protect control systems.

Read more...
Why Multi-Factor Authentication, universal ZTNA and Zero Trust matter
Access Control & Identity Management Cyber Security
Malicious cyber actors are experimenting with new attack vectors and increasing the frequency of zero-day and other attacks, according to Fortinet’s 1H 2022 FortiGuard Labs Threat Landscape report.

Read more...