Due to the rise of the Internet of Things (IoT), information is being collected at an unprecedented rate, with much of it being highly personal and confidential. It is because of this that cybersecurity is of much greater importance today.
ePLDT, an industry-leading provider of digital business solutions to enterprises in the Philippines, is warning local companies that employing data security software and hardware is not enough to combat cyber-threats. This is according to its newly appointed head of cybersecurity.
 |
| Angel Redoble |
“Companies that focus on data security technology alone unfortunately do not understand cybersecurity,” said Angel Redoble, Chief Information Security Officer of ePLDT.
“Because a single attack can affect every department of a company, cybersecurity therefore should be approached holistically by integrating it in every aspect, not just in technology. To do this, a company must first focus on having a strict protocol or process and must have the right people who are skilled to combat different kinds of threats. Once these are integrated with the appropriate technology, a company can achieve business resiliency.”
This crucial insight follows on the heels of Ernst & Young’s Global Information Security Survey of 2016 and 2017 which reveals that 64% of 1,735 firms surveyed, which includes Philippine companies, admitted that they have zero or mere informal threat intelligence programs. Moreover, 42% do not have an agreed communications strategy or plan in place in the event of a significant attack.
A security process or program provides the framework for keeping a company at a desired security level by assessing the risks, deciding how to mitigate them, and planning on how to keep programs and practices up to date. ePLDT notes that this is where most companies fail because they only treat cybersecurity as technology or software.
“The hundreds of thousands of vulnerabilities that are recorded every day plus the evolving hacking methods just goes to show that like a process, cybersecurity is a never-ending journey and should be evolved to mitigate & manage new threats,” said Redoble.
Data security skills on the other hand are also crucial since a skilled workforce can identify and therefore understand how to handle the vast majority of threats to data, like malware or hackers seeking confidential information.
Redoble recognizes that some institutions do not employ cybersecurity because of financial constraints but also notes that this should not stop them because the tradeoffs are more than beneficial for a company’s performance and existence.
“Thanks to growing trends, not deploying cybersecurity is and will become more costly in the future. Companies who are serious about surviving must place it as a business imperative as a single attack can break any business.”
Fortunately due to the current trends and developments in cybersecurity, businesses can now achieve the process, technology, and skills to uphold security through inexpensive means. By administering an assessment of their current capabilities, a company can already set certain protocols while the lack of skills problem can be addressed by teaching the staff how to recognize an attack.
With regards to technology, Redoble notes that there are various data security measures that are being offered subscription-based. However, applying these three may leave a company’s in-house I.T. department drained and will lead them to focus on security rather than boosting productivity. As a solution, Redoble recommends to partner with an end-to-end data security provider.
As a leader in data security services in the country, ePLDT’s Cyber Security portfolio is a suite of services that cover devices, systems, processes, and expertise, designed to defend enterprises from multiple security risks, evolving threats, and malicious software attacks. The portfolio is further boosted by ePLDT’s vast infrastructure network due to its 9 state-of-the art data centers and is recognized internationally through its ISO 27001:2005 Information Security Management System (ISMS) certification.
To know more about ePLDT’s cybersecurity offerings, visit www.epldt.com/solutions/cyber-security/.
