Skip to main content

Former TalkTalk chief flags legacy kit as security risk

LIVE FROM INFOSECURITY EUROPE, LONDON : Dido Harding, former CEO of UK multiplay operator TalkTalk ( pictured ), warned against failing to decommission legacy systems following M&A, blaming her old company’s lack of action for a devastating data breach in 2015. Harding told delegates robust systems and immediate honesty with customers were central to protection against attacks, and minimising reputational damage if hit. During 2015 TalkTalk was the target of one of the largest data breaches in the European telecoms sector, with over 150,000 customers impacted and stinging attacks from officials and the media. Following the incident there was an exodus of customers and its share price dived to a level the operator has never really recovered from. It was also hit with a then record £400,000 fine from national data regulators. “The impact was enormous reputationally and financially,” Harding stated and, although she believed the company hadn’t done enough to protect itself before the hack, it was “not a company that didn’t take cybersecurity seriously”. She added the foundation of the company, built through M&A activity, meant it had inherited a number of old systems, many unused for years but not decommissioned: “It’s the legacy that gets you,” Harding warned. Reputation Harding told the audience the biggest risk was reputational, which was her justification for informing customers within hours of the attack through publicity in broadcast media, email and social media. Although widely criticised for her stance at the time, including by the police, Harding said she believed being “honest about it” was the best way to regain customer trust. The former executive said three months after the incident TalkTalk’s churn rate was lower than prior to the attack and in its own feedback data more customers stated they would recommend the company to a friend. These metrics, she added, were due to its approach in the immediate aftermath. However, its improved churn rate and satisfaction rates would have excluded the customer exodus immediately following the incident. Board battle Other advice given included: ensuring clear communication channels between executives and technical staff; and ensuring the board are asking the right questions about potential vulnerabilities. “Cybersecurity is a board decision,” Harding said, adding: “Still no board is asking the right question. Are we OK? The answer is no. None of us can give 100 per cent security. We should be asking what are the risks.”
Labels:

Comments

Post a Comment

Popular posts from this blog

AP Newswire

WASHINGTON (AP) -- The Senate on Tuesday confirmed President Donald Trump's pick to lead the National Security Agency and the U.S. Cyber Command. On a voice vote, the Senate approved Paul Nakasone for one of the nation's top intelligence posts. They also approved his military promotion to general. Nakasone, a longtime member of the cryptologic community, has a strong background in cyber issues. He is replacing the current director, Mike Rogers, who is retiring. During his confirmation hearing, Nakasone said China, Russia and other nations that launch cyberattacks against the United States aren't worried about retribution and see no reason to change their behavior. "They don't fear us," he said at the hearing, adding that the U.S. must impose costs on those adversaries to make them stop. Nakasone previously commanded the U.S. Army Cyber Command and held military intelligence positions in Afghanistan, Iraq and the Republic of Korea. ap.stripes.com
Post a Comment
Read more

Global Home Automation Markets 2015-2018 & 2024: Increasing Proliferation of Smartphones and Smart Mobile Devices - A Strong Growth Driver for Home Automation Market

Dublin, May 24, 2018 (GLOBE NEWSWIRE) -- The "Home Automation - Global Strategic Business Report" report has been added to ResearchAndMarkets.com's offering. The report provides separate comprehensive analytics for the US, Canada, Japan, Europe, Asia-Pacific, and Rest of World. Annual estimates and forecasts are provided for the period 2015 through 2024. Market data and analytics are derived from primary and secondary research. This report analyzes the worldwide markets for Home Automation in US$ Million. The US market is further analyzed by the following Functional Areas: Lighting Security HVAC Entertainment Others. The report profiles 80 companies including many key and niche players such as: ABB Ltd. (Switzerland) Abilia AB (Sweden) AMX (USA) Control4 Corporation (USA) Crestron Electronics, Inc. (USA) Emerson Climate Technologies, Inc. (USA) HomeSeer Technologies, LLC (USA) Honeywell International, Inc. (USA) Leviton Mfg. Company, Inc. (USA) Legrand (France) Vantage C...
Post a Comment
Read more

Gartner Identifies How Security Leaders Can Be Empowered to Drive Results

NATIONAL HARBOR, Md.--( BUSINESS WIRE )--The overwhelming demands on security leaders today can have a paralyzing effect. During the opening keynote address today at the Gartner Security and Risk Management Summit , Gartner analysts provided insight to empower these security leaders to take action. Tweet this Gartner analysts provided guidance to an audience of more than 3,400 security and risk leaders and practitioners on how to be empowered to adapt their people, processes and technologies to address the old and the new; empowered to transform their approach to risk governance to be more continuous and inclusive; and empowered to scale their security capabilities in other ways than by hiring more people. Much of this empowerment can come from addressing three simple questions: What’s important? What’s dangerous? What’s real? Gartner analysts took the attendees through a series of scenarios to show how these questions can provide clarity, and in each scenario, the in...
Post a Comment
Read more