To kick-start our #SICyberSeries, James Lyne outlines the top 7 threats and trends security teams should be considering as we look to the year ahead. We'll be discussing each of these trends in more detail each week. 

1. Security teams facing economic uncertainty and predicted budget cuts
2. New technologies disrupting the industry bringing both promise and new security threats
3. Ransomware and phishing remain a constant challenge
4. Increasingly complex and interlinked supply chain
5. The changing role of the CISO
6. Remote working and securing cloud services & infrastructure
7. Challenges around the adoption and implementation of DevSecOps

Almost every security team will be feeling the effects of the current economic climate, and in this video James Lyne and Giorgia Cacace share their advice for teams facing budget cuts and being tasked with doing more with less. There are several steps you can take, including: 

1. Prioritising the basics of cyber hygiene to increase cyber resilience. 
2. Tailoring your security strategy around what matters to you - the top 3 to 5 threats based on your unique risk profile.
3. Building a strong security culture in your organisation, including education, awareness and reporting processes. 
4. Evaluating vendors and considering the value of an external sounding board. 

For the third in our weekly #SICyberSeries, James Lyne and Giorgia Cacace discuss a hot topic for 2023, which is the challenges security teams face in adopting and implementing DevSecOps successfully in their organisation. In this video we discuss: 

• The overall goal of DevSecOps.
• Myth-busting: Does DevSecOps slow down development?
• The biggest challenge around implementation.
• How can we help?

Flaws in your supply chain can have a devastating effect on your business's security, and it's becoming more difficult to keep track of, and manage, supply chain environments as they become ever more complex and interlinked. As an interesting and worthwhile target for adversaries, mitigating risks and reducing supply chain problems will therefore continue to be a key theme in 2023. 

For the fourth in our weekly #SICyberSeries, James Lyne and Giorgia Cacace discuss: 

• Conducting thorough due diligence - testing suppliers as well as your own infrastructure.
• Keeping track of organisational assets - you can't protect what you don't know is there.
• Having an incident response plan and practising it.
• Training & awareness focused on detecting risks in your supply chain.
• Reviewing permissions to make sure they adhere to least privilege principle.
• How can we help?

How can we build better relationships with the board and convince them of the value of their cyber security investment? Security leaders now have a seat at the table, and with that comes a demand for CISOs to demonstrate not just technical and leadership skills, but be able to relate security back to the overall business goals and risk profile.

For the fifth in our weekly #SICyberSeries, James Lyne and Giorgia Cacace discuss: 

• Aligning security objectives with business goals.
• Marketing your team's successes continuously.
• Regular relationship building and networking with stakeholders.
• Framing risk and managing expectations.
• Choosing your metrics carefully. 
• How can we help?