The Uncommonly
Pragmatic Blog
Is your company prepared to see and address unimaginable threats?
By Amy Radin
At the recent Board Risk Committee-hosted event, “Threat Briefing: Russia’s War on Ukraine – Actions Boards Should Consider,” Richard A. Clarke, an internationally known expert on cybersecurity, shared specific consequences coming out of the current situation in Ukraine and key actions board directors and the executive team should take to get out in front of risks — especially those that cannot even be imagined because they have never occurred before.
Clarke’s guidance is worth paying attention to — he was the first Cyber Czar for the US Government and author of the first National Strategy for Cybersecurity. As a government official for over 30 years, he served in senior positions in the White House (Special Assistant to the President), State Department (Assistant Secretary), and the Pentagon.
Clarke’s recommendations are based on the reality that history is full of examples reinforcing that people tend to discount or ignore the first occurrence of a threat simply because it has never been seen before, and therefore is hard to imagine and easy to discount its early signals.
Boards and the senior executives they serve must be sensitive to the risk their own behaviors can create, and take the steps to overcome natural, human inaction when there is time to get ready.
Top among Clarke’s recommendations for boardroom and senior executive priorities:
• Ensuring all software is up-to-date
• Looking at the organization’s cyber risk register frequently
• Engaging a managed security services provider (MSSP)
• Increasing the use of multi-factor authentication across the company’s network
• Reviewing backup plans, ensuring backups exist at multiple points and are done frequently
• Leveraging the organization’s DNS to block external threats
• Switching system alerts from “monitor” to “active blocking”
• Deploying an externally sourced threat intelligence team to enhance internal resources
• Educating all employees – “when you see something say something”
• Dusting off the incident response plan and practice it
• Identifying and engaging the data experts throughout the organization who are most likely to spot threats early
• Assigning accountability at the board level for horizon scanning
Managing the unimaginable threats that can bring down a business and harm stakeholders is a space for innovators to bring their special skills.
To learn more visit the website of the Business Risk Committee or follow Richard Clarke on social media.
About Amy Radin
Amy Radin is an adviser, speaker and author, working with executives and senior leaders to deliver growth through meaningful innovation. She offers an uncommonly pragmatic and disciplined approach that begins with pinpointing high-potential unmet market needs, and from there provides a proven framework for “what to do next” and how to lead through the inevitable, daily challenges any organization will face in pursuit of innovation.
Read More
Download My Infographic
The Change Maker's Playbook: How to Seek, Seed and Scale Innovation in Any Company
Download Now
Buy My Book
The Change Maker's Playbook: How to Seek, Seed and Scale Innovation in Any Company
Order Now
Join The Uncommonly Pragmatic Newsletter
Amy is a leader who is demanding and relentless in the pursuit of the great.
In The Change Maker’s Playbook she shares her philosophy and methods to transform ‘out-there’ ideas into new real world business models that can change businesses’ growth trajectories and how brands engage with their customers.
Kahina Van Dyke
Global Head, Digital Channels & Client Data Analytics; Standard Chartered Bank Board Member, Progressive Insurance