Beware Falling Into the Technology-First Resilience Trap

All too often, organizations build cybersecurity strategies around new tools and technologies rather than the resilience of the business.

See Also: AI Agents Demand Scalable Identity Security Frameworks

With disruptive cyberattacks on the rise, resilience is no longer just about keeping systems online, but keeping operations, processes and workflows running, said Jon Staniforth, a cybersecurity consultant and former CISO at Royal Mail. Preparing for attacks requires collaboration across all business teams – not just IT.

“If they don’t truly understand the business processes before automating them, whatever that means to your organization, you’re really just increasing the complexity of something you maybe don’t understand to start with,” Staniforth said.

In this video interview with Information Security Media Group at ISMG’s Cybersecurity Summit: London Financial Services, Staniforth discussed:

• Dependency mapping and prioritization;
• Responding to increased regulatory pressure;
• The evolving role of the CISO.

With over 20 years of experience working across multiple sectors, including logistics, telecom, technology, retail and financial services, Staniforth has demonstrable experience addressing the security challenges faced by organizations today. He is a member of the CyberEdBoard.