Profile of Steve Durbin

CEO of the Information Security Forum

Member Since: 5/7/2014
Author
News & Commentary Posts: 20
Comments: 7

Steve Durbin is CEO of the Information Security Forum, an independent, not-for-profit dedicated to investigating, clarifying and resolving key issues in information security and risk management. He is a frequent speaker on the Board's role in cybersecurity and technology. Contact: [email protected]

Articles by Steve Durbin

View Content By Month

The Trouble With Automated Cybersecurity Defenses

7/13/2021
While there's enormous promise in AI-powered tools and machine learning, they are very much a double-edged sword.
Post a Comment

6 Tips for Managing Operational Risk in a Downturn

4/15/2021
Many organizations adjust their risk appetite in an economic downturn, as risk is expanded to include supplier and customer insolvency, not to mention cash-flow changes.
Post a Comment

10 Benefits of Running Cybersecurity Exercises

12/28/2020
There may be no better way to ascertain your organization's strengths and weaknesses than by running regular security drills.
Post a Comment

The Future's Biggest Cybercrime Threat May Already Be Here

7/29/2020
Current attacks will continue to be refined, and what may seem a weakness now could turn out to be a disaster.
Post a Comment

Security & the Internet of Things: What You Need to Know

11/19/2019
The Internet of Things (IoT) has burst into the connected world and promises much: from enabling the digital organization, to making domestic life richer and easier. However, with those promises come inevitable risks: the rush to adoption has highlighted serious deficiencies in both the security design of IoT devices and their implementation.
Post a Comment

How Human-Centered Security Can Strengthen Your Organizations

9/19/2019
Humans are often regarded as the 'weakest link' in information security. However, organizations have historically relied on the effectiveness of technical security controls, instead of trying to understand why people are susceptible to mistakes and manipulation.
Post a Comment

Security Assurance Is a Long-Term & Ongoing Investment

8/14/2019
Establishing a business-focused security assurance program is a long-term, ongoing investment.
Post a Comment

Manipulated Machine Learning Sows Confusion

7/10/2019
Machine learning, and neural networks in particular, will become a prime target for those aiming to manipulate or disrupt dependent products and services.
Post a Comment

Digital Vigilantes Weaponize Vulnerability Disclosure

6/11/2019
Over the next two years, vulnerability disclosure will evolve from a predominantly altruistic endeavor to one that actively damages organizations.
Post a Comment

Security Workforce 2019: Closing the Gap Builds a Bridge to the Future

5/7/2019
To plug the ongoing cybersecurity skills gap, those doing the hiring need to start thinking outside the box.
Post a Comment

Emerging Cyber Threats Leverage Society's Reliance on Connectivity & Intelligent Systems

4/2/2019
By 2021, the world will be significantly digitized and connected. The race to develop the next generation of super-intelligent machines will be in full swing and technology will be intertwined with everyday life.
Post a Comment

Is Your Supply Chain the Weakest Link?

3/19/2019
Despite organizations' best efforts to secure intellectual property and other sensitive information, limited progress has been made in effectively managing information risk in the supply chain.
Post a Comment

4 Global Cybersecurity Threats for 2019

12/31/2018
As the calendar turns to 2018, ISF is urging members to watch out for four specific security issues: ransomware, legislation, IoT and supply chain.
Post a Comment

Want a Sustainable Security Workforce? Start Getting Innovative

10/29/2018
Security is a never-ending struggle to keep up. Staffing your team is no exception. However, the old method of finding talented InfoSec people are no longer working. It's time to get innovative.
Post a Comment

A False Sense of Security

8/24/2018
Emerging threats over the next two years stem from biometrics, regulations, and insiders.
Post a Comment

Cybersecurity & C-Suite: Why Executives Should Take the Lead

5/29/2018
Enterprises of all sizes need to be cyber resilient, but who should take the lead? Here's why the whole C-Suite needs to get more involved in the fight against cyberattacks – both inside and out.
Post a Comment

Cybercriminals Increasingly Targeting 'Crown Jewels' Both Inside & Out

5/1/2018
Protecting the 'crown jewels' of an enterprise and organization is always a top priority. However, cybercriminals are now trying to steal this privileged data from both inside, as well as outside, businesses of all kinds.
Post a Comment

Insider Threats: Defense in All Directions

9/11/2017
In order to get ahead of insider threats you have to look in every direction.
Post a Comment

Effective Leadership Means Effective Security

6/7/2017
Raising security awareness across the enterprise requires diligence, leadership and contextual threat intelligence, and it starts in the C-suite.
Post a Comment

How To Talk About InfoSec To Your Board Of Directors

5/19/2014
Today's cybersecurity challenges cannot be met by a compartmentalized IT strategy because every piece of the modern enterprise runs on connectivity and data.
Post a Comment