The Economic Times daily newspaper is available online now.

    Biometric authentication is more secure than passwords: Accenture Security's Bissell

    Synopsis

    Kelly Bissell talks about the role of the CISO, rise of managed security services, up skilling of cyber talent and importance of biometrics.

    Image article boday
    With a 5000 plus skilled global security force and 4 cyber fusion centres in Tel Aviv, Bangalore, Washington DC and Prague, Accenture Security provides end to end security across industries.

    In an interaction with ETtech’s Aritra Sarkhel, Kelly Bissell, MD & Global Lead, Accenture Security talks about the role of the CISO, rise of managed security services, up skilling of cyber talent and importance of biometrics.

    Edited Excerpts


    Cyber attacks are on the rise and CISO’s still do not seem to be a part of the board level decisions. Why?

    Their role has not evolved fast enough. Some are still trying to catch up. Not all companies have made the transition. Their challenge is to make the board cyber aware. They need to be prepared with the right business language rather than tech jargons to articulate the cyber risk that is coming at the business so that the board is aware and understands them. Cyber Security is not a technology risk but a business risk.

    Where do your managed security services come into play?

    We help customers transition in terms of security architecture. For example, we helped transform a large broadcast company who wanted to be a Netflix type of platform. We made security the base.

    Security is the key that unlocks business potential. We helped them go securely online and monetize their content. Similarly, customers can use our identity platform to understand what type of user’s access content and help sell those more.

    Many security vendors use point solutions which isn’t good at the enterprise level for its piecemeal approach. What kind of change is needed?

    This approach mostly does not work. We need to look at end to end issues about security and integrate those functions to serve across the business. We think about the holistic view taking everything from a strategy and risk perspective wherein the audience is the CEO. We operate certain capabilities on behalf of those companies as a partner through our services. These include strategy risk reporting to implementation of tools like cyber defence, identity and app security.

    But then how do you deal with shortage of skilled cyber security people?

    There are very few well skilled cyber security people. You have to retain the best. Our clients have a finite resource that’s why they come to partners like us who can bring the right skills and be an extension of their team.

    For example, we are the extension of a large oil & gas org. We run their end to end IT security operations and bring that experience that customers can leverage from.

    Are biometrics safe?

    I believe biometrics is much more secured than user ID and passwords because it’s super easy to crack passwords. Biometrics has a layer of complexity and unique identification. But then again, any technology if you don’t implement well, it will be less secure. It’s not the technology’s fault. It’s how one uses it and deploys it matters.

    How do you look at IOT security?

    There are no global standards for security of connected devices. There is a lot of pressure on smaller organization to get a product to market faster than anyone else. This is enabled by engineers who may not been skilled around cyber security by design. We are helping the CISO’s and product managers with our solutions and research from R&D labs.

    Does budget shortage in firms for hiring cyber security talent affect their fight against such attacks?

    Many a time, tighter budgets do not allow for hiring skilled cyber security talent. The companies have a challenge of retaining talent who look for bigger projects. Some of the skill shortage can be addressed by automation of certain tasks that are repeatable and re skill certain people for additional complex problems.
    The Economic Times

    Stories you might be interested in