CS Mar-Apr 2024

news
Greg Wetmore,
Entrust.
TIME TO MIND YOUR PS AND QS?
Entrust launches Post-Quantum Ready
PKI-as-a-Service platform
Entrust has recently announced the general
availability of its Post-Quantum Ready PKIas-a-Service
(PKIaaS PQ) platform.
With this launch, the company's cloudbased
PKI-as-a-Service offering can now
provide both composite and pure quantumsafe
certificate authority hierarchies, it
states, enabling customers to test or
implement quantum-safe scenarios and
infrastructure. This makes it "the first
commercially available platform of its
type", it further claims.
"Although the quantum threat is up to
a decade away, we know the transition
to quantum-safe algorithms won't be just
another crypto refresh cycle," says Greg
Wetmore, vice president, Software
Development at Entrust. "To prepare, we
need to move today's public key cryptographic
systems from their current state
to new quantum-safe cryptographic
algorithms.
"This transition will be more complex than
anything we've done in the past, and will
touch just about every piece of digital
infrastructure and data we rely on today.
Organisations should be looking at their
Post Quantum (PQ) migration strategy
now, and implementing the tools and
technology needed to test and migrate to
quantum-safe security," he states.
PROTECTING DATA FALLING WAY SHORT
Companies and authorities still taking breach
AJ Thompson, Northdoor.
threats too lightly
Companies need to stop treating regulations as a tickbox
exercise and realise that the point of them is to
protect data, warns AJ Thompson, CCO, Northdoor.
"Equally, the ICO [Information Commissioner's Office]
also needs to up its efforts in implementing 'proper'
sanctions against those organisations that are failing
customers and partners."
The high-profile introduction of GDPR in 2018 was
meant to prove that the authorities were taking the
threat from cyber-criminals and the misuse of data
seriously, Thompson further points out. "There were
promises of major consequences for every business
that failed to adhere to the regulation, but, as the years
have gone by, we have seen that those organisations suffering data breaches have
been, frankly, wrapped on the knuckles, with no further consequences."
RAPID ACTION NEEDED TO SOLVE CRIPPLING SKILLS SHORTAGES
Traditional university education in cybersecurity is not sufficient
New research in the UK and US reveals that over three-quarters (78%) of
cybersecurity and IT professionals believe a traditional university education in
cybersecurity is not doing enough to prepare graduates for the modern workforce.
Meanwhile, nearly two-thirds (64%) of cyber industry professionals say current
recruitment processes inadequately assess candidates' practical skills.
This is according to a study called 'Securing the future of cybersecurity: From
classroom to every career stage' from Hack The Box, a leading cybersecurity
upskilling, certification and talent assessment platform.
The research highlights what it says is a gap between the essential practical skills
required to combat modern cyber-criminals in the workplace and the expertise
cultivated within university education.
An overwhelming 90% emphasise the need for cybersecurity and computer science
graduates to be prepared with hands-on, practical experience before their first role.
LOGPOINT AND SECURVALUE PARTNER UP TO SHARE THEIR EXPERTISE
Alliance aims to help customers detect and respond to cyber threats.
Armed with Logpoint's modern SIEM+SOAR solution, SecurValue can offer
more robust threat detection and response, real-time data analysis, early detection
of data breaches and easy implementation of compliance requirements, it is
claimed. "We're happy to partner with SecurValue to help organisations strengthen
security posture and cyber resilience. They share our vision for conducting long-term
business in Southern Europe," says Christian Pijoulat, regional director SEMEA at
Logpoint. "SecurValue has a tailored approach to their customers, based on skilled
cybersecurity professionals and trusted technologies, and we're proud that
Logpoint's solution is now a part of that."
8
computing security March/April 2024 @CSMagAndAwards www.computingsecurity.co.uk