With all the advances in cybersecurity over the past 10 years, why are we still hearing about large breaches being undetected for months or years? One key reason is that detection technology has not kept pace with adaptive adversaries. Learn more about how threat hunting is being used to close this gap, and the role Internal Audit can play.
Adam is a Managing Director in PwC’s Cybersecurity and Privacy practice, and a leader in PwC’s Internal Audit Cybersecurity service offering. Prior to PwC, he helped start and ran the threat hunting service offering at a security services provider, and has hands-on experience with both running breach incident response engagements as well as pro-active threat hunting projects. Adam has spoken at many national, regional, and local conferences on the topic of threat hunting and incident response, including at IIA regional and national conferences.
Artificial intelligence and robotics are part of the same automation journey, building upon the traditional IT methods for automating manual processes. Significant efficiencies can be gained by improving processes using “bots” that automate controls, testing, and other repeatable activities. But who is managing the bots? Establishing governance of RPA and relevant controls up-front can help effectively mitigate risks. By embedding governance, risk management and controls into the enterprise’s mobilization and deployment of RPA, organizations can prevent issues before they arise. Getting it right from the start is far more effective and cost efficient than cobbling together a patchwork of policies and controls later.
Fran is a Director with PwC’s National Digital Risk Solutions (DRS) Practice. He has 15 years of experience across a variety of industries and Fortune 500 companies, focusing on providing innovative data analytics and automation solutions to manage risk and increase operational efficiency. With a focus on health industries, Fran works with organizations to digitally upskill their people, develop governance programs and to develop technical capabilities that automate processes and support fact based decision making.