3rd Party Risk Management , Fraud Management & Cybercrime , Fraud Risk Management

Breaking Down Silos With a Holistic View of Security, Risk

Cybersecurity and risk management work hand in hand to bolster a company's resilience, reducing exposure to potential threats. Dave Johnson, a principal solutions architect at Expel, advises organizations to adopt a holistic approach to cybersecurity to address risks effectively.

Cybersecurity teams are often challenged with communicating security concepts to the rest of the organization, but the ability to quantify risks to the business can help security teams break down silos so the entire organization can work more collaboratively. "We need to understand how they perceive risk - whether it's from a legal perspective or from an image or brands. It's extremely important to understand the problem we are solving for them," Johnson said.

Technology is needed to help reduce risks and address fraud. Behavioral analytics plays a pivotal role in identifying fraudulent activity, he said. "The best habits within the industry regarding mitigating fraud have been identifying the behaviors of what a normal purchaser looks like. This helps establish a baseline, building that into your code, saving time between the alert being generated and analyzing the alert for potential fraud," Johnson said.

In this video interview with Information Security Media Group at the Fraud, Security and Risk Management Summit, Johnson also discussed:

• Breaking down silos and helping other areas of the enterprise understand the implications of cybersecurity for organizational success;
• Adopting innovative technologies such as containerization and serverless architectures;
• Using scenario-based assessments to mitigate risks effectively.

At Expel, Johnson works with information security sales teams as a technical adviser to help customers find solutions. He has nearly 25 years of experience in the industry and has worked in IT admin, information security analysis, systems engineering and sales teams.