Governance and risk management, insider threats, patch management
Analysis of DAT Freight's Voss and budget allocation for comprehensive cyber defense
Michael Novinson (michael novinson) •
May 6, 2024
Despite rapidly evolving cybersecurity tools and strategies, attackers continue to exploit vulnerabilities with surprising success, raising serious questions about the effectiveness of investments in digital defenses. I am. Erika Voss, vice president of information security at DAT Freight & Analytics, said companies need to evaluate budget allocations based on “business model, company ambition, and executive leadership priorities.”
Related item: All-in-one vulnerability management, detection, and response solution
Voss pointed to common pitfalls in cybersecurity investment decisions and how companies tend to acquire new technology over maintaining basic cyber hygiene. According to him, organizations place too much emphasis on spending on detection and response tools, and less on investing in penetration testing.
“As we buy more tools and features and want to have the latest and greatest technology stack, we need to realize that we still need to ‘touch the keyboard.’ We invite you,” Voss said. “The more tools you have, the more risk appetite you have.”
In a video interview with Information Security Media Group on the implications of cybersecurity at the AI Summit, Vos also spoke about:
- Insider threats and the challenges of gaining executive buy-in to address them.
- The impact of SEC guidelines on the corporate governance and security policies of publicly traded companies and their suppliers.
- Why you need to integrate cybersecurity into your business planning process.
Voss is an information security, risk, and compliance executive who partners with CEOs, executives, and the broader security and academic community to help grow personal and professional brands on why security is more than just a data point. I am. She is a member of her Cyber EdBoard.