Most Inspiring European Professionals in Information & Data Security to Watch in 2024

VOL - 09 | ISSUE - 01 | 2024 Naviga?ng Modern Data Risks Understanding the Shi?ing Pa?erns in Cybersecurity Threats and How to Stay Ahead Balancing Protec?on with Access Strategies for Maintaining Data Security While Respec?ng User Privacy and Access Needs

“The strongest defense against cyber threats is a culture of security leadership.”

Innovators in Information and Data Security EDITOR’S NOTE n a field where information and data security are benchmarks for the industry, ensuring long-term growth essential, a select group of professionals is redefining that benefits all stakeholders. I what it means to protect and innovate. These individuals stand out for their forward-thinking approaches, Their leadership style is defined by a blend of strategic focusing on operational excellence and creating insight and a genuine passion for the people they lead. They environments where both data and users are safeguarded. are not just professionals but mentors, guiding their teams Their vision extends beyond the traditional scope of with a clear vision and a strong sense of purpose. Their security, encompassing a deep commitment to privacy, ability to inspire and motivate has resulted in highly compliance, and ethical practices. engaged teams that are committed to delivering exceptional security solutions. These professionals have an exceptional ability to anticipate and adapt to the unique challenges of their industry, In this edition, "Most Inspiring European Professionals in whether it's enhancing cybersecurity measures, optimizing Information & Data Security to Watch in 2024," we acknowledge their achievements and the lasting influence data management, or leading teams through periods of they are having on the information and data security technological change. They are at the forefront of some of industry. the most secure systems, consistently pushing boundaries to elevate the standards of information and data security in Europe. Have a good read ahead! What sets these leaders apart is their dedication to sustainability and social responsibility. They understand that true success in information security extends beyond technical proficiency; it involves making a meaningful impact on the communities they serve. By prioritizing responsible business practices, they are setting new Anish Mier

C O N T E N T S COVER STORY 08 ARTICLES Navigating Modern 16 Data Risks Understanding the Shi?ing Pa?erns in Cybersecurity Threats and How to Stay Ahead Balancing Protection with Access Strategies for Maintaining Data Security While Respec?ng 20 User Privacy and Access Needs

Pooja M Bansal Editor-in-Chief CONTENT FOLLOW US ON Deputy Editor Anish Miller www.facebook.com/theeuroleaders.com Managing Editor Katherine Debora www.twi?er.com/theeuroleaders.com WE ARE ALSO AVAILABLE ON DESIGN Visualizer Dave Bates Company Name Featured Person Brief Art & Design Director Davis Mar?n Alexandre is a proven motivator, innovator, leader, and security CONTACT US ON Cryptix AG Alexandre Horvath Associate Designer Jameson Carl enthusiast who has solid knowledge of privacy, data protection, cryptix.ag CISO/DPO and cyber security. Email info@theeuroleaders.com SALES For Subscrip?on David has been working in cyber security across the public and Nationwide Building David Boda Senior Sales Manager Wilson T., Hunter D. www.theeuroleaders.com private sectors for twenty years. Prior to this, he co-founded a Society Chief Security and successful internet services business. Customer Success Manager Andrew Watson nationwide.co.uk Resilience Officer Copyright © 2024 TheEuroLeaders, Sales Execu?vesTim, Smith All rights reserved. The content and images used in this magazine Joshua is the Chief Information Security Officer at Sumitomo Joshua Rahimi Sumitomo Riko should not be reproduced or Riko Europe GmbH, a company that places importance on the TECHNICAL Chief Information Europe GmbH transmitted in any form or by any true meaning of MONOZUKURI while providing world-class Security Officer means, electronic, mechanical, avs.sumiriko.com Technical Head Peter Hayden quality products. photocopying, recording or Technical Consultant Victor Collins otherwise, without prior permission from TheEuroLeaders. Martyn Booth At Dunnhumby, Martyn's focus as Chief Information Security dunnhumby Reprint rights remain solely with Officer centers on fortifying global security measures and Chief Information SME-SMO dunnhumby.com TheEuroLeaders. advising the board on cutting-edge strategies. Security Officer Research Analyst Eric Smith SEO Execu?veAlen Spencer sales@theeuroleaders.com Phillip Davies Phillip is a business leader with over 30 years experience who Equifax UK Chief Information has led and advised various organizations on privacy, risk, September, 2024 equifax.co.uk Security Officer & Vice information security, cyber, fraud, and anti-piracy. President

he field of cybersecurity and data protection is developing strategies to mitigate them. These early crucial as organizations face increasing threats and experiences laid the groundwork for his deep dive into T difficulties. As technology advances, so do the risks cybersecurity, where he began to specialize in areas such as associated with it, making robust security measures and threat analysis, incident response and data protection. effective data protection strategies indispensable for safeguarding sensitive information. This industry has grown Eventually, Alexandre’s focus expanded to include not just to encompass a wide range of practices designed to address technical security measures but also the broader aspects of the vibrant nature of cyber threats, ensuring that both risk management and data protection. He learned that technological infrastructures and personal data are effective cybersecurity requires a comprehensive adequately protected. approach—one that encompasses technology, people and processes. This realization led him to pursue certifications One prominent figure in this field, Alexandre Horvath, has and further education in these areas, allowing him to take demonstrated exceptional leadership and a profound on more complex and strategic roles. commitment to the field. As Chief Information Security Officer and Data Protection Officer at Cryptix AG, he Alexandre’s journey has evolved from hands-on technical focused on the integration of advanced security measures roles to leadership positions where he could shape the with comprehensive data protection strategies. His direction of cybersecurity and risk management strategies at leadership is marked by a strategic vision that balances an organizational level. “Each step of my journey has been technical prowess with a deep understanding of risk driven by a passion for making a positive impact and a management. His ability to foster open dialogue and drive commitment to protecting the digital assets that are so innovation has positioned him as a key player in shaping critical to our world today,” Alexandre quoted. industry standards and practices. With this passion, Alexandre has been nominated for Cryptix AG is dedicated to aligning its security initiatives several prestigious awards in 2024, including the Top with broader business objectives, ensuring that its approach Global CISO Award by Cyber Defense Magazine, the not only addresses current threats but also supports Forttuna Global Excellence Award for Business Leaders sustainable growth and innovation. Through strategic and double nomination for the Swiss CISO of the Year and planning and a proactive stance, Cryptix AG aims to Swiss CISO for Digitalistion. maintain its leadership in the cybersecurity field while effectively managing emerging challenges. Alexandre was selected for the PICCASO Awards Europe 2024 Bridging the Data Privacy and Security Gap Journey in Cybersecurity and Risk Management Award. Alexandre describes his career, saying, “My journey isa story of passion, continuous learning and a commitment to safeguarding the digital world.” Alexandre’s interest in cybersecurity began with a fascination for technology and its growing impact on human lives. At the initial stage, he realized that as technology advanced, the threats and risks associated with it would emerge. The challenge of protecting sensitive information and ensuring the security of digital systems captured his attention. Alexandre was particularly drawn to the idea of being on the front lines, defending against cyber threats and helping organizations sail across the complications of risk management. “ Alexandre started in IT and quickly gravitated toward roles that involved security and risk assessment. He found that he had a natural aptitude for identifying vulnerabilities and

Alexandre feels, “I’m proud of the path I’ve taken and the about finding the right equilibrium between robust impact I’ve been able to make in the field of cybersecurity, cybersecurity practices and ethical data management, risk management, and data protection.” Alexandre’s ultimately building trust with the company’s stakeholders. journey has been one of continuous learning, adaptation, and growth, and he is excited to see where it will take him Promoting Global Collaboration and Innovation next. Considering a career in this field, Alexandre asserts, Through Empowered Leadership “It’s a challenging but incredibly fulfilling journey—one where you can truly make a difference.” Alexandre’s leadership style is collaborative, adaptive, and focused on clear communication. He manages international Balancing Cybersecurity and Data Privacy: Dual Role cross-functional teams in high-stakes areas like in Safeguarding cybersecurity and risk management. Alexandre believes in empowering his team members by fostering an environment As the Chief Information Security Officer (CISO) and Data of trust and open dialogue where diverse perspectives are Protection Officer (DPO) at Cryptix AG, Alexandre’s valued and encouraged. primary responsibilities are leading teams, developing comprehensive security frameworks, safeguarding the Considering the global nature of their work, Alexandre organization’s digital assets and ensuring compliance with prioritizes cultural awareness and adaptability, ensuring that data protection regulations. Cryptix AG stays aligned despite time zones and different work cultures. His goal is to unify the team around a shared As CISO, Alexandre focuses on developing and vision, driving excellence and innovation while overcoming implementing comprehensive security strategies to protect the obstacles of cybersecurity challenges together. against cyber threats and secure its information systems. As DPO, his priority is to uphold data privacy standards, Integrating Security and Business Strategy for ensuring that Cryptix AG handles personal data responsibly Sustainable Growth and in accordance with regulatory requirements. At Cryptix AG, aligning cybersecurity and data protection Balancing these dual roles requires a strategic approach, strategies with the company’s broader business goals is aligning its security measures with privacy obligations. It’s essential to the company’s success. That’s why Alexandre ensures that Cryptix AG’s security measures not only protect its digital assets but also support its overall business objectives. Alexandre and his team created a secure foundation that enables innovation and growth by integrating cybersecurity into every aspect of its operations. He works closely with leadership to ensure that security initiatives are aligned with the company’s strategic vision, helping it build trust with its customers and partners while driving business success. Fostering a Growth Mindset and Collaborative Culture As a proven motivator and innovator, Alexandre believes that fostering a culture of innovation and continuous improvement starts with empowering his team. He encourages open dialogue, where everyone feels comfortable sharing ideas and challenging the status quo. By promoting a growth mindset, Alexandre ensures that learning and adaptation are at the core of the company’s work. He supports his team in exploring new approaches, embracing emerging technologies and continuously refining

their processes. This environment of creativity and Empowering Tomorrow's Leaders collaboration drives the team to achieve excellence and stay ahead in the developing field of cybersecurity. For those aspiring to lead in cybersecurity, risk management, and data protection, Alexandre’s key advice Strategic Approach to Agile Security Management is, “Cultivate a mindset of continuous learning and adaptability.” Staying ahead requires both technical Alexandre manages the crucial triangle of cost, quality and expertise and a strategic vision. speed to market, ensuring that Cryptix AG addresses emerging security needs without compromising on any Alexandre suggests, “Focus on building strong front. To achieve this balance, Alexandre prioritizes communication skills, as effective leadership in these fields strategic planning and resource allocation, aligning its involves translating complex concepts into actionable strategies for your team and stakeholders.” Lead with security initiatives with business goals. By leveraging agile methodologies, Alexandre quickly integrity and a commitment to ethical practices—these are adapts to new threats while maintaining high-quality the cornerstones of trust in the digital world. standards. He focused on optimizing resources and streamlining processes so the company can deliver robust Vision for Cybersecurity Leadership at Cryptix AG security solutions that are both cost-effective and timely, ultimately safeguarding the organization and supporting Alexandre’s key objectives for Cryptix AG’s cybersecurity business growth. and data protection initiatives are to strengthen its defenses against emerging threats while maintaining compliance A Proactive Approach to Cybersecurity with evolving regulations. To tackle with emerging and evolving cyber threats requires He aims to implement innovative technologies, enhance its a proactive and continuous approach. Alexandre prioritizes incident response capabilities and foster a culture of ongoing education and training for himself and his team, security awareness across the organization. Alexandre is keeping them informed about the latest threats and striving continuously to refine strategies and stay agile to technologies. ensure that Cryptix AG remains a leader in securing its digital assets and protecting the privacy of He believes, “We can quickly adapt to new challenges by its stakeholders. fostering a culture of agility and readiness.” “Regular threat assessments, simulations and collaboration with industry peers ensure that we’re not only aware of emerging risks but fully prepared to respond effectively,” he added. This proactive stance is key to maintaining robust security and protecting the organization in a dynamic environment. Balancing Sustainable Leadership and Well-Being It is essential to maintain a healthy work-life balance in a demanding role for long-term success and well-being. Alexandre prioritizes setting clear boundaries between work and personal time, ensuring that he can recharge and stay focused. “ He does regular exercise, mindfulness practices and time management to manage stress and bear the workload. Alexandre delegates tasks to his team, allowing him to focus on what’s most important. “I’m better equipped to lead effectively and sustainably by maintaining work-life balance,” he quoted.

Naviga?ng Modern Data Risks Understanding the Shifting Patterns in Cybersecurity Threats and How to Stay Ahead he patterns of cybersecurity threats are changing drastically, posing challenges to businesses and individuals alike. As T technology advances, so do the techniques employed by malicious actors, making it crucial to remain vigilant and informed. With the increasing reliance on digital platforms, understanding these shifting threats has become more essential than ever. Staying ahead requires a proactive approach, integrating both awareness and action. Take proactive steps today to secure your data by implementing the latest cybersecurity measures and educating yourself on emerging risks. Emergence of New Threats The traditional methods of cybersecurity are no longer sufficient to combat today's threats. Attackers have developed more sophisticated techniques, exploiting vulnerabilities that were previously unconsidered. From phishing schemes to ransomware attacks, the nature of threats has diversified. The shift from isolated attacks to more coordinated, large- scale operations has created a more challenging environment for security professionals. One of the most concerning developments is the rise in targeted attacks. Hackers are now focusing on specific industries and entities, tailoring their methods to exploit weaknesses in systems and human behavior. This targeted approach makes it harder for generic security measures to be effective, necessitating more customized and robust defenses. The Role of AI and Machine Learning Artificial intelligence (AI) and machine learning have become double- edged swords in the field of cybersecurity. On one hand, they offer advanced tools for identifying and mitigating threats. On the other hand, attackers are using them to launch more sophisticated and unpredictable assaults. For defenders, AI provides the ability to analyze vast amounts of data in real-time, identifying patterns and anomalies that could indicate a breach. Machine learning models can adapt and improve over time, making them invaluable in the ongoing battle against cyber threats. However, these technologies also empower attackers to automate their attacks, increasing their reach and effectiveness. September 2024 | 16 | www.theeuroleaders.com September 2024 | 17 | www.theeuroleaders.com

The Human Factor Supply Chain Vulnerabilities Despite advancements in technology, the human element The interconnected nature of modern business means that remains one of the weakest links in cybersecurity. Social organizations are increasingly reliant on third-party vendors SUBCRIBE SUBCRIBE engineering attacks, such as phishing, continue to be highly and partners. While this interconnectedness offers many effective because they exploit human psychology rather benefits, it also introduces vulnerabilities. A breach in a than technological vulnerabilities. The success of these supplier's system can have a cascading effect, compromising attacks highlights the need for ongoing education and the security of the entire supply chain. awareness programs. Organizations must thoroughly vet their partners and ensure Organizations must prioritize training their staff to that they adhere to strict security standards. Regular audits TODAY TODAY recognize potential threats and respond appropriately. This and continuous monitoring of third-party activities can help includes not only technical training but also fostering a mitigate the risks associated with supply chain culture of security mindfulness. Employees should vulnerabilities. understand the importance of following security protocols and reporting suspicious activities. The Importance of Incident Response The Evolution of Ransomware Despite the best preventive measures, breaches can still occur. When they do, a well-prepared incident response plan 1 year 6 Months Ransomware has evolved from a straightforward threat to a can make all the difference. An effective response involves more complex and dangerous one. In its early days, quickly identifying the breach, containing the damage, and 12 Issues 6 Issues ransomware typically involved encrypting a user's files and restoring normal operations as soon as possible. demanding payment for the decryption key. Today, $250 $130 ransomware attacks often involve additional layers of Incident response teams should be trained to act swiftly and extortion, such as threatening to publish sensitive data if the decisively. This includes not only technical response but also ransom is not paid. communication strategies to manage the situation both internally and externally. Transparency and timely updates This evolution has made ransomware one of the most can help maintain trust with customers and stakeholders. 3 Months 1 Month Stay In The Known feared threats in the cybersecurity world. The potential consequences of a ransomware attack are severe, ranging Staying Ahead 3 Issues 1 Issue from financial loss to reputational damage. The rise of $70 $25 ransomware-as-a-service platforms has made it easier for To stay ahead of cybersecurity threats, organizations must even less technically skilled criminals to launch attacks, adopt a multi-layered approach that combines technology, Subscribe to increasing the prevalence of this threat. education, and proactive measures. This includes regularly updating security protocols, conducting penetration testing, Cloud Security Challenges and staying informed about the latest threats. Collaboration with industry peers and participation in information-sharing TheEuroLeaders The widespread adoption of cloud services has introduced networks can also provide valuable insights into emerging new security challenges. While cloud providers offer robust risks. security measures, they are not immune to attacks. The Get TheEuroLeaders in print, and shared responsibility model means that while the provider The cybersecurity landscape is constantly changing, and secures the infrastructure, the customer is responsible for what works today may not be effective tomorrow. By digital on www.theeuroleaders.com securing their data and applications. remaining adaptable and vigilant, organizations can better protect themselves against the evolving threats. Misconfigurations in cloud settings are one of the most common causes of data breaches. These errors can leave In Conclusion, sensitive information exposed, making it an easy target for attackers. Ensuring that cloud environments are properly The shifting patterns in cybersecurity threats require a configured and monitored is essential for maintaining proactive and comprehensive approach to ensure data security. security. By understanding the nature of these threats and taking steps to mitigate them, organizations can stay ahead and protect their valuable assets. September 2024 | 18 | www.theeuroleaders.com

Balancing Protec?on with Access Strategies for Maintaining Data Security While Respecting User Privacy and Access n the digital age, organizations face the challenging task of ensuring data security while respecting user I privacy and access needs. The delicate balance between safeguarding sensitive information and allowing appropriate access is a critical consideration for businesses. Achieving this balance is not just about deploying the latest security technologies but also involves a thoughtful approach to policies, user rights, and ethical considerations. Let’s explore key approaches that can help you achieve this balance while keeping your data secure and accessible: Understanding the Balance Maintaining data security involves protecting information from unauthorized access, breaches, or misuse. On the other hand, respecting user privacy means ensuring that personal data is handled with care, transparency, and in line with user expectations. The challenge lies in ensuring that these two goals do not conflict but rather complement each other. Effective strategies for balancing protection with access involve considering the nature of the data, the roles of those accessing it, and the context in which access is granted. Organizations must create environments where data is both secure and accessible to those with legitimate needs. Implementing Role-Based Access Control One of the most effective methods for balancing security and access is the implementation of role-based access control (RBAC). RBAC ensures that users have access only to the data necessary for their specific roles within an organization. By assigning permissions based on roles rather than individuals, organizations can minimize the risk of unauthorized access while ensuring that users can perform their duties effectively. Implementing RBAC requires a thorough understanding of the organization’s structure, and the specific access needs of each role. Regular audits and reviews of access permissions September 2024 | 20 | www.theeuroleaders.com September 2024 | 21 | www.theeuroleaders.com

are also essential to ensure that access levels remain Continuous Monitoring and Incident Response appropriate as roles and responsibilities evolve. Continuous monitoring of data access and usage is essential Encryption and Data Masking for identifying potential security threats and ensuring that privacy is respected. Implementing tools and processes for Data encryption and masking are key tools in the arsenal for real-time monitoring allows organizations to detect maintaining data security while allowing necessary access. anomalies or unauthorized access attempts quickly. Encryption ensures that even if data is intercepted or accessed by unauthorized individuals, it remains unreadable An effective incident response plan is also crucial. This plan without the correct decryption keys. This adds a layer of should outline the steps to be taken in the event of a data protection, particularly for sensitive data that must be breach or privacy violation, ensuring a swift and accessed across different platforms or by multiple users. coordinated response that minimizes damage and restores trust. Data masking, on the other hand, allows users to work with real data without exposing sensitive information. By Balancing Access with Zero Trust Security substituting sensitive data with fictional but realistic data, organizations can ensure that user privacy is maintained Zero Trust is a security framework that assumes that threats while still enabling access to necessary information for could be both external and internal. Therefore, it requires tasks such as testing or analysis. strict verification for every user or device attempting to access resources. While this approach may seem to hinder Adopting a Privacy-by-Design Approach access, when implemented correctly, it can provide a balance between security and accessibility. A privacy-by-design approach ensures that privacy Zero Trust requires that users verify their identity at considerations are embedded into the design of systems and processes from the outset. This proactive approach involves multiple points, reducing the likelihood of unauthorized identifying potential privacy risks early in the development access. However, it can be configured in a way that does not process and implementing measures to mitigate them. create unnecessary friction for users, ensuring that access needs are met without compromising security. By integrating privacy into the design phase, organizations can avoid conflicts between security and access needs down In Conclusion, the line. This approach also ensures that user privacy is respected without compromising the functionality or Balancing data security with user privacy and access needs accessibility of the system. is a complex but achievable goal. By implementing strategies such as role-based access control, encryption, Educating and Empowering Users privacy-by-design, user education, continuous monitoring, and Zero Trust security, organizations can create a secure User education is a critical component of any strategy environment that respects privacy and meets access needs. aimed at balancing data protection with access needs. Employees must be aware of the importance of data As businesses continue to handle increasingly sensitive security and privacy and understand their roles in data, the importance of this balance cannot be overstated. maintaining it. Regular training sessions, clear policies, and By adopting these strategies, organizations can protect their open communication channels are essential for fostering a data while respecting the rights and needs of users, ensuring culture of security and privacy within the organization. that security and accessibility work hand in hand. Empowering users with knowledge and tools to protect data Interested in implementing these strategies within your not only reduces the risk of breaches but also helps to build organization? Contact us today to learn more about how we trust. When users understand the rationale behind security can help you secure your data while maintaining user trust "To lead in data security is to measures and their role in the process, they are more likely and accessibility. to follow best practices and report any concerns. understand that the human element is as critical as the technology.” September 2024 | 22 | www.theeuroleaders.com

"Data security is not a product, but a leadership-driven process.”

theeuroleaders.com

Most Inspiring European Professionals in Information & Data Security to Watch in 2024

Most Inspiring European Professionals in Information & Data Security to Watch in 2024

Presentation Transcript