Insights on Cybersecurity: A Conversation with Jen Waltz
Cass Cooper recently engaged in an informative dialogue with Jen Waltz, a renowned figure in cybersecurity and the founder of Imaginative, an advanced managed security service provider (MSSP). Their discussion revolved around the increasing influence of artificial intelligence (AI) in cybersecurity, the vulnerabilities facing the healthcare sector, and essential strategies for channel leaders striving to stay secure in today’s digital landscape.
Introducing Jen Waltz and Imaginative
Jen Waltz serves as both the founder and Chief Information Security Officer (CISO) at Imaginative. Her company operates at the intersection of partner strategy and market execution within the realm of cybersecurity. Unlike traditional consultancy firms, Imaginative emphasizes building tailored solutions. Waltz helps vendors pinpoint the right partners while developing financial models and scalable strategies that can yield significant results within just six to eight months. This method focuses on partner orchestration, always prioritizing tangible business outcomes.
The Multifaceted Meaning of "Network"
Waltz highlighted the complex implications of the term "network" in the context of cybersecurity. She defined it through a threefold lens that professionals need to grasp:
- Network Topology: This entails understanding the cloud infrastructure, software-defined wide area networks (SD-WAN), and data segmentation.
- Professional Network: This refers to the individuals who can uplift and advocate for you, creating opportunities through strong connections.
- Net Worth as Network: The interconnectedness of your ecosystem and the value you bring to it is crucial for success. Familiarity with all three dimensions is vital for thriving in cybersecurity.
Advice for New Entrants to Cybersecurity
Waltz provided invaluable advice for individuals, especially women and people of color, entering the cybersecurity field amid the rise of AI. Her primary recommendation is to skill up. With AI rapidly changing the landscape, foundational roles such as help desks and system administration are becoming increasingly automated. She emphasized the importance of continuous learning—taking free courses, obtaining certifications, and leveraging platforms like Coursera and New Horizons. Currently, she commits to completing a new certification course each week, underscoring the necessity of staying current in a fast-evolving field.
The Role of AI in Cybersecurity Defense
When discussing how AI is integrated into modern cybersecurity defenses, Waltz provided a list of essential tools organizations should employ:
- Continuous Authentication Mechanisms: These include privilege access management to ensure secure user access.
- AI-Driven Anomaly Detection: These systems can identify unusual behavior on the network, providing an early detection of potential threats.
- Automated Patch Management: This allows for timely updates to software and systems, reducing vulnerabilities.
- User Behavior Analytics: Monitoring location anomalies in user behavior can help spot irregular activities.
- Advanced Email Filtering: Effective systems can detect phishing attempts, protecting against one of the most common cyber threats.
Waltz pointed out that these tools facilitate a transition from reactive to proactive cybersecurity measures.
Unique Cybersecurity Vulnerabilities in Healthcare
The healthcare sector faces significant challenges regarding cybersecurity, attributing to several unique vulnerabilities:
- Legacy Systems: Outdated technology that is costly to replace, increasing the risk of breaches.
- Connected Medical Devices: The proliferation of devices that can be exploited by attackers.
- Understaffing in Cybersecurity Roles: Many healthcare organizations lack the personnel necessary to address these threats adequately.
- Telehealth Expansion: Rapid growth without the full spectrum of protective measures.
- High-Value Data: Patient records are worth far more than stolen credit card information on the dark web.
Waltz expressed concern that hospitals are often held ransom, leading to life-threatening delays in surgeries. Enhancing the number of certified professionals in this sector is imperative for future safety.
Targeting Vulnerable Populations: Children’s Hospitals
Waltz discussed why cybercriminals are increasingly targeting children’s hospitals and social security numbers. The key factor is fresh credit; children typically have clean credit histories, which makes their Social Security numbers attractive for creating synthetic identities. Cybercriminals can construct fake personas using this information, often remaining undetected until the child seeks credit or applies for college. This poses significant risks, with parents being urged to stay vigilant and consider identity protection services like LifeLock.
Final Thoughts for Cybersecurity Professionals
Waltz concluded her discussion by emphasizing that cybersecurity, especially within healthcare, transcends mere IT concerns. It fundamentally relates to patient safety and well-being. She advocated for stronger representation at the board level, community involvement, and an increase in diversity among leadership roles. As the workforce gap in cybersecurity presents itself, it also offers a unique opportunity for growth and innovation.
