“Think of cybersecurity as a strategic asset, not just a compliance requirement” | Interviews

#cybersecurity #strategic #asset #compliance #requirement #Interviews

tThey reported on Sunday: How do you see cyber security risks globally the development of landscapes?

Emad Haffer: The cyber security scenario is changing rapidly, which is driven by technological promotions and global economic changes. Emerging technologies, such as AI, IOT and cloud infrastructure, are newly explaining how businesses run. They are also introducing new weaknesses that we are now looking at a point of view from passive defense we call an active cyber defense. This means that a business or a country’s specific risk landscape is required to achieve the intelligence, skills and skills needed to understand the landscape and then to take active actors and expect campaigns – before the actual events increase.

Living ahead of the challenge, we should move into a reaction, and now move into an active defense strategy. This means not only to defend against known dangers, but also to expect and identify potential vectors to attack before attacking. We encourage organizations – whether it be private businesses or government agencies to build capabilities that allow them to understand their unique risk landscape, analyze relevant campaigns and actors and respond to speed and health. Cyber ​​security can no longer be an IT problem. This is a strategic.

TNS: What are the major challenges of business today in securing financial data?

Ah: There are traditional risks that are intact, but with the increasing use of AI’s integration and cloud infrastructure, new challenges have also emerged. Many businesses struggle with complexity introduced by these technologies. For example, when organizations migrate towards the cloud, they often decrease to what extent it changes their network limits. This extended digital footprint introduces the risks that were not present in the premises environment. In addition, AI itself can be made a weapon example, for example, by creating extremely convincing material or automating attack campaigns.

To deal with these challenges requires a comprehensive security approach: modern tools, the latest policies, and most importantly, skilled personnel who understand both the legacy systems and new technologies.

TNS: How do you guess the business cyber security strategies in the Middle East, especially in Pakistan?

Ah: Due to a similar technical environment, the region’s business faces similar challenges. However, there are individual factors in every country and every sector that creates its threat landscape. In Pakistan, we see new technologies especially in the financial sector very fast. As a encouragement, maturity is also increasing in how organizations understand and respond to threats. Many of our Pakistani clients show high awareness about cyber threats, which is a positive sign. The ongoing success will depend on how these strategies are localized.

TNS: Is the financial technology sector in Pakistan in accordance with cyber security trends?

Ah: Although it is difficult to compare one with a world -class, it is clear that Pakistan is moving in the right direction. The art -tech ecosystem is promoted. Regulators are focusing on cyber security needs. We have seen that companies have seen steps to secure apps, improve customer verification and manage data privacy.

Nevertheless, there is room for improvement – especially in terms of awareness and training. Digital Innovation Pace should match parallel investment in risk management framework and security skills.

TNS: How can businesses safely connect new technologies without cyber security compromising, with the rise of IOT, AI and big data?

Ah: The merger should never be done quickly. Unfortunately, many companies are in a hurry to adopt new technologies, which seek performance or competitive superiority, but fail to fully understand the risks associated with it. The first step should always be a complete risk diagnosis. Understand what each technology brings to the table – not only in terms of benefits, but also a risk related to its risk.

Based on this understanding, organizations need to update their cyber security strategies. This means reviewing security policies, investing in new monitoring tools or hiring personnel with specific technical skills. It is also important to adopt a long-term theory: Just do not solve today’s risks-plan for scalebuability and adaptation.

TNS: How important is human resource development in maintaining cyber security preparation?

Ah: This is absolutely fragile. Even the latest security tools are useless if your staff does not know how to use them well. That is why we emphasize professional training. But this is not just the IT team. An unaware employee can open the door to data violation. In fact, a lot of violations occur by the consumer’s mistake, such as leaking credentials. Therefore, awareness training is just as important for all employees.

TNS: What is your message to the CEO that still see cyber security as just as an IT problem?

Ah: I will ask them to review and speed up. Cyber ​​security is a business continuity. The same violation can stop the operation, damage your reputation and can have regular results. We have seen that threatening actors use multi -stage attacks, where the initial violation is just for another destructive campaign.

Moreover, in today’s world, technology is the basis of many businesses. This foundation needs to be protected not only technically, but also according to strategy. CEOs must make cyber security mandatory for governance, risk and compliance, and ensure that it is represented at the highest decision -making level.

TNS: Have you witnessed a cyber attack pattern related to any region in South Asia or Pakistan?

Ah: Rainsmare and social engineering are very famous in the region. Social engineering, though fundamental, is an effective and common attack vector. These two ways – renomware and phishing – dominate the whole of South Asia.

TNS: Is Pakistan equipped with a massive cyber attack, especially on its financial infrastructure?

Ah: Preparation is a permanent process. Instead of focusing on “yes or no”, I emphasize the importance of preparation and adaptation. Threat profiles change rapidly – especially with the geographical political factors of the game. Keeping a key strong risk intelligence, latest policies and well -practiced reaction protocol.

Pakistan is taking the right steps. Through our work with various public and private organizations, we see a clear commitment to improvement. But cyber security is never ready to work-this is a cycle of permanent learning and adaptation.

TNS: What are the common errors of financial institutions in dealing with cyber security?

Ah: A major surveillance understands the user’s awareness. Financial institutions often focus on securing networks and software, but forget that the same employee’s error – such as malicious clicking links – can ignore all these defenses. We always emphasize the importance of internal awareness programs. Cyber ​​security employee should be part of an on -boarding. There should be regular training and fake attack exercises.

Cyber ​​security is not just needed to comply, think as a strategic asset. Whether you are a startup or a national agency, invest in understanding your risk landscape, train your people and prepare for the future. Cyber ​​security is not destination. This is a permanent journey.

TNS: Is Pakistan effectively cooperating with international partners in cyber security? How does Kaspersky plan to support Pakistan’s digital change while maintaining security flexibility?

Ah: Yes, of course. Pakistan is a very important country for us in the Meta region. We cooperate with many local technology partners and government organizations. We not only provide cyber security solutions but also share our intelligence and skills. Our aim is to help Pakistan build internal capabilities so that they can freely manage cyber security-a response to its events, risk or other important tasks.

We are determined to support a country or organization that wants to build a safe digital future. In addition to providing modern cyber security solutions, we offer our global insight -based risk intelligence, especially from our region. More importantly, we share our skills to help countries like Pakistan develop our cyber security capabilities and infrastructure.

TNS: Do you believe that Pakistan needs human resources to reach the international standard of cyber security?

EF: With personal experience, some of the most talented professionals of cyber security I have met are from Pakistan. Raw skills are definitely present. With proper training and exhibition, there is no doubt that Pakistan can meet and exceed international standards.

The author is a senior economic representative in this news, he can be reached to @Jabwadar.