University of Manchester’s CISO on Managing Major Cyber Incidents – Infosecurity Magazine>
Info Security Magazine – James Coker
Here are the key points from the interview:
– A major focus after the cyber attack was building resilience to continue critical services during incidents.
– Incident response plans have been adapted and cyber exercises increased to improve preparedness.
– Universities face unique challenges balancing open collaboration/research with data protection.
– Aligning with guidance from Universities UK and NCSC has helped establish risk management culture.
– Experience in private/public sectors helps tailor advice to higher education context.
– Collaboration can be improved through consulting government guidance, tools, and participating in external networks.
– Professionalizing the industry through chartered statuses and encouraging entry-level professionals is a concern.
– Security architecture/design has driven mindset shifts towards early security engagement.
– Advice for fellow CISOs is to leverage the strong support community in this challenging role.
The interview discussed lessons from a major incident, challenges in higher education security, and opportunities to strengthen collaboration and professionalism across the industry.
Link: https://www.infosecurity-magazine.com/interviews/uni-manchester-ciso-cyber-incidents/