Harpreet Sidhu

It has been over a decade since Deloitte directly helped the National Institute of Standards and Technology (NIST) develop the #CybersecurityFramework (CSF). As part of that journey, we were proud to leverage our commercial fortune 50 clients and relationships to facilitate public-private discussions that helped “land the plane” on the performance-outcome based CSF. Since then, we have used the CSF to assess hundreds of cybersecurity programs around the globe. This longevity of the NIST CSF, and its broad adoption across government entities and commercial industries, is a testament to it being at “just the right level” of guidance to enable outcomes based on a wide range of innovative solutions, rather than following a compliance-based set of prescriptive instructions. Today, on World Quantum Day, Deloitte is proud to post a draft of a NIST CSF Community Profile for Cryptographic Resiliency (https://lnkd.in/e6bve2dA). This draft document was developed by the Deloitte team based on a number of extremely beneficial informal discussions around the world. We wanted to frame the multi-year upgrade to post quantum cryptography in the context of regular cybersecurity operations so that executive leaders can place it within regular reviews and prioritization discussions. As a next step, we plan to submit it to the NIST process shortly, where it will go through their excellent drafting and comment processes. We will also leverage the draft to continue serving clients in #FinancialServices and other industries to become quantum cyber ready. In the meantime, please feel free to check it out and provide comments here. A great number of individuals were influential in this document’s direction. Special thanks to Donna F. Dodson, Matthew Scholl, and Bill Newhouse. You can access the draft profile here: https://lnkd.in/e6bve2dA Our broader Quantum Cyber Readiness web site is here: https://lnkd.in/eMp9Mc37 Adnan Amjad, Mark Nace, Emily Mossburg, Deborah Golden, Scott Buchholz, Marc Verdonk, Itan Barmes, Duleesha Kulasooriya, Clare Harding, Ben Shapiro, Casper Stap, Libby Volz, Tessa H., Hannah Logerfo, Colin Schappin, Daan van der Valk #Deloitte #QuantumCyberReadiness #CyberRiskManagement

294

8 Comments

Developing a culture of cyber confidence is critical in this era of evolving threats, which starts with alignment amongst leadership. Our new 2025 Cybersecurity Study highlights critical disconnects between CISOs and the broader C-suite, underscoring the urgent need for unified leadership to develop comprehensive #cybersecurity strategies built on clear communication, shared risk understanding, and focused investments. Learn more in the full report: https://lnkd.in/gkPj58wR

20

Our new EY research confirms that cybersecurity remains center stage: 84% of C-suite leaders say their organization’s focus on cybersecurity has increased compared with three years ago. What’s more, 85% also say their organization’s cybersecurity focus will increase over the next year compared with today. Yet with the additional focus CISOs (66%) are more likely than the rest of the C-suite (56%) to express worry that the cybersecurity threats their organization faces are more advanced than their defenses. Special thanks to the team who helped us assemble this very enlightening research, David Cooper, Michelle DeLiberty, Tim Shanahan and Aman Rai.

40

4 Comments

Our Center for Generative Artificial Intelligence Safety, Knowledge Systems and Cybersecurity is up and running! Capital One launched the center with the University of Illinois to support GenAI research center (including $3M for fellowships). Learn all about it. https://bit.ly/45Q6pX6

42

1 Comment

🔐 Discover how CISOs can identify and manage data risks using Microsoft’s data security and governance solutions—powered by insights from PwC. 🛡️Learn how leading organizations embrace AI and manage data risk while building secure, AI-ready foundations: 🔗 https://pwc.to/4dImfFm #PwCMicrosoft #Cybersecurity #AI #AIReadiness #Data #DataSecurity #DigitalTrust

11

1 Comment

Cyber attackers do not all think the same—why should defenders? Latinas in cyber bring cultural fluency, multilingual skills, and sharp pattern recognition that threats do not see coming. Yet they make up less than 1 percent of the field. That is not just a gap—it is a missed opportunity. If we want security strategies that actually scale, we need to start by widening the talent pipeline. #Diversity #Cybersecurity #Culture

88

5 Comments

CISA just published new Zero Trust Microsegmentation guidance. What are the 3 most important takeaways, and what's missing? Watch my video commentary to find out.

39

I recently shared Deloitte’s research on the evolving #CISO role and how it has become more strategic in recent years. As the CISO role evolves, so do the skills needed to be successful. Traditionally, the CISO career path follows an IT or technical background. Love this feature on two CISOs who didn’t follow the standard trajectory, including Deloitte’s global CISO Kevin Winter. Kevin has a degree in psychology and joined the Marine Corps. after college, where he learned both technical and leadership skills. As organizations broaden their view of cyber across the business, we’re seeing demand for people with a non-traditional skillsets (teaching, business and military backgrounds, for example) which translate to cybersecurity and add a lot of value. https://lnkd.in/enkv_65U

121

1 Comment

Chief information security officers (CISOs) at healthcare organizations remain at the forefront of protecting sensitive patient data, helping ensure the resilience of critical infrastructure, and enabling the adoption of innovative technologies. They are expected to deliver on this mandate while grappling with the limitations of legacy systems and a scarcity of cybersecurity talent. How quickly are they able to identify, respond to, and recover from cyber incidents to ensure uninterrupted care? As a result, resilience as a theme remains a priority for cyber leaders. #kpmgmiddleeast #kpmgsaudi #kpmgcyber #datasecurity #cyberresilience #cyberhealthcare Burhaan Khan Imad Ataya

22

1 Comment