Interview Luis Fernandez - Revista SIC

This interview discusses various aspects of cybersecurity, focusing on the upcoming Securmática 2024 event and the implications of the NIS2 directive. The discussion highlights the evolving landscape of cybersecurity, emphasizing the need for a more mature approach at all levels of an organization, especially the high-level management. Key points include: * NIS2 Directive: The NIS2 directive is seen as a significant step towards unifying cybersecurity efforts across Europe, mandating more responsibilities and resources for companies. It aims to make organizations more resilient and also makes high-level management accountable for understanding technological risks. This directive will push companies to prioritize cybersecurity and allocate necessary funds. * Challenges of Regulation: While NIS2 is seen as beneficial for putting companies in order, it also raises concerns about the potential for over-regulation. There is skepticism about the timely implementation of the directive in Spain, with suggestions that shortcuts and workarounds may be used. * The Role of CISOs and New Roles: The NIS2 directive is expected to empower CISOs and create new cybersecurity roles. The responsibilities of these roles may overlap, causing friction between different actors. * The Need for Convergence: The discussion emphasizes the need for convergence between humanistic and technological disciplines, especially in areas like data protection and AI. * Identity and Digital Wallets: The conversation touches on the importance of digital identity and the development of digital wallets in Europe. These are seen as crucial for secure digital transactions and for establishing digital identity. There is a concern about countries and companies competing for people's data. * Securmática 2024: The Securmática event is framed as an important meeting point for cybersecurity professionals to discuss best practices and the latest trends. The theme is "hands-on and well-accompanied," highlighting the need for collaboration and a joint effort to tackle cybersecurity challenges. The event will focus on sector-specific cybersecurity issues. * Sector Specialization: The need for specialization in cybersecurity is highlighted, with specific sectors like transportation and finance requiring tailored solutions. Also, there is a need to provide cybersecurity assistance to smaller companies that are part of the supply chain of large companies. * Cybersecurity Threats: The interview notes that, despite the sophistication of modern threats, simple methods such as malicious Excel macros, are still effective and common. Twitter: @ciberafterwork Instagram: @ciberafterwork Panda Security: https://www.pandasecurity.com/es/ Zscaler: https://www.zscaler.es +info: https://psaneme.com/ https://bitlifemedia.com/ https://www.vapasec.com/ VAPASEC https://www.vapasec.com/ https://www.vapasec.com/webprotection/