Employees are Essential in Reducing Cyber-RiskBy Andrea Villar | Thu, 12/17/2020 - 05:00
Q: What is Forcepoint's proposal for the Mexican market?
AG: Forcepoint's mission is to protect company data no matter where it is located, especially in these complex times and with so many people scattered around. The pandemic has greatly accelerated the transformation to data security and has helped us to strengthen our mission. Business data is a very important asset and protecting it is a daily and constant effort because the ways in which cybercriminals enter business systems are expanding on a daily basis. Certain vectors are very popular for attacks, such as email or web surfing. It is estimated that around a third of all links that reach us through conventional browsing are malicious.
We have a portfolio of solutions that are aimed at protecting data no matter where or from which device the user is connected. At Forcepoint, our motto is to let the good work. Sometimes cybersecurity tools slow down important mail or do not allow you to save files on certain external devices and we make sure this does not happen.
RC: We can monitor users’ activity and analyze the risk that this interaction is generating. In this way, we can respond proactively to protect the data and not reactively. Our solution lets everything good for the organization go by but if we begin to detect any anomalous behavior, we stop it.
Q: What are the features of Forcepoint's hybrid products?
CR: These solutions are focused on three different points of view. One is known as Dynamic Data Protection, which protects data regardless of where the users are and based on the risk they generate. Companies today apply general security policies, whether for the entire organization or for groups of users. However, if within a group of users, someone begins to behave in an anomalous way of his own free will or because his identity has been stolen, we can detect who they are and dynamically adjust data protection policies.
The other solution is Dynamic User Protection, which focuses on user activity monitoring and helps us to profile the risk generated by each person. Once we have mapped the risk, we can apply the security policies. The third area is Dynamic Edge Protection. The digital transformation we are experiencing due to the pandemic has forced users to scatter. Given this scenario, we have to guarantee two things: that their connectivity is safe and trustworthy. This solution also covers navigation, protecting the infrastructure while the user is already connected to the internet, exchanging emails or browsing the web.
AG: Sometimes data is seen as static but it is not. Data moves around the company and so does the user. An employee who is good today, for example, may try to steal the entire customer list tomorrow because he is going to move to another job. It can also be the simple fact that the user took his equipment out of the company office, connected it to an unsecure network and compromised the system. These three solutions help us to dynamically protect the data, the user and the edge. Today, a company's perimeter is where its people are.
Q: What is the main challenge of creating sectioned security strategies within companies?
AG: The main challenge is to know the user and to know which tools he uses and which ones he does not. Otherwise, very restrictive policies can be implemented and this generates many complaints from people who need to use certain tools and cannot. Productivity decreases because the user cannot work fluidly. In Mexico, there is a big talent gap in cybersecurity and if a company has hundreds of alerts during a day it is difficult to address all of them and therefore act quickly. This means there is little visibility to stop cyberattacks.
CR: By monitoring the user with Forcepoint UEBA, the system will generate specific alerts for those users who for some reason start to change their behavior, increasing their risk. This means it is no longer necessary to have an army of people because security analysts focus on those high-risk users and they are not lost in the thousands of incidents that occur during a day.
Q: In a field as competitive as cybersecurity, how have you set your company apart from the competition?
AG: We have a very clear vision of where we want to go. Forcepoint has several solutions that have specific functions but the long-term vision is integration: to be able to use a product that can be integrated with another and that makes life easier for the person operating it. In addition to User Behavior Analytics, we have Email Security, among many other solutions. With all these tools, the client receives an integrated solution that reduces the response time to an incident. We create an ecosystem that is aimed at reducing risk.
RC: Each particular solution contains elements of other solutions to share intelligence. Additionally, our solutions are adapted to the client’s architecture, no matter what it is. If a company, for example, wants to gradually migrate to the cloud, our solutions adapt to that transformation. The same is true if a client works 100 percent in the cloud.
Q: How ready are Mexican companies to counter cyberthreats?
AG: Especially at the beginning of the pandemic, the digital transformation accelerated worldwide. This revolutionized the world of work and all cybersecurity experts had to react within weeks to get thousands of employees working from home and accessing their systems. There has been a good reaction from companies but it seems to me that in some cases, preference is still on operation over security. Now is the time for companies to rethink this strategy because the attack surface has become larger. Companies are now more aware that cybersecurity is not a luxury but rather an insurance. When something happens to a company and it does not have insurance, it costs 16 times more to correct an incident.
RC: Time is one of the factors that also plays against companies. Sometimes they prefer to deal with more urgent issues but cybersecurity will always be important. Likewise, the budget in these past months went largely to enabling conditions for remote work and cybersecurity was left out.
Forcepoint is a cybersecurity company with a human-centric vision. Through user behavior analysis, the company measures the risk that each person poses to the company