Richard Cassidy, EMEA Field CISO at Rubrik, talks about how third-party risk management has led to significant breaches in organizations, highlighting the importance of DORA's focus on managing and holding third-party providers accountable.

In this episode of CISO Conversations: EU Data Regulations, Richard Cassidy, EMEA Field CISO at Rubrik, is joined by Anna Delaney, Director of Productions at Information Security Media Group (ISMG), to explore why the Digital Operational Resilience Act (DORA) makes operational resilience a priority for financial services organizations. They discuss how DORA will impact your financial institution, how to best prepare for DORA and improve operational resilience, and how to increase oversight and accountability of third parties in the supply chain.

Do you have to follow DORA? Yes. Why? Richard Cassidy of Rubrik has the answer.

The healthcare industry, traditionally slow in digital transformation due to stringent regulations, is now experiencing rapid change. As digitization accelerates, vast amounts of personal and professional data are being stored across healthcare systems—making them prime targets for cybercriminals. This sector’s rich data environment, coupled with evolving cybersecurity practices, creates a unique challenge. Unlike the well-established security measures in banking and financial services, healthcare's cyber defenses are still maturing.

In cybersecurity, the real challenge isn’t just preventing attacks; it's about how you rebound and continue delivering your digital products and services when an attack hits. The crucial focus must be on preparedness and resilience, not just avoidance. It's natural to want to ignore the possibility of a breach—our minds prefer to focus on positive scenarios. But effective planning requires embracing the pessimistic side of our intellect.

Welcome to the Data Security Decoded podcast, brought to you by Rubrik Zero Labs. In each installment, we discuss cybersecurity with thought leaders and industry experts, and get their take on trends, themes, and where they see the sector going next. This is a must-listen for security and IT leaders looking to better understand trends shaping data security and how they can achieve cyber resilience.

With the growing volume of data and increasing cost of breaches, organizations must find ways to manage and protect their ever-expanding datasets. To address this escalating threat landscape, Rubrik and CrowdStrike have joined forces to redefine cyber defense with several integration points between our platforms. This video walks you through the latest integration between Rubrik Security Cloud and CrowdStrike Falcon Insight XDR, from installing and configuring, through how the Rubrik data context can be used by a security operator when investigating an incident.

Mike Tyson famously said, 'Everybody has a plan till they get punched in the face.' In cybersecurity, traditional strategies focus on preventing attacks—essentially planning for the punch. But what happens when the punch lands? It’s not just about the breach itself; it’s about how an organization responds. True resilience is measured by how swiftly and effectively you rebound. Strengthening infrastructure, refining processes, and enhancing talent are crucial steps in not just surviving but thriving after an incident.

Welcome to the Data Security Decoded podcast, brought to you by Rubrik Zero Labs. In each installment, we discuss cybersecurity with thought leaders and industry experts, and get their take on trends, themes, and where they see the sector going next. This is a must-listen for security and IT leaders looking to better understand trends shaping data security and how they can achieve cyber resilience.

Backup, backup, backup. That’s the message from Heather Hughes from Aon Cyber Solutions, who emphasizes the crucial role of robust backups in cybersecurity. Effective backups can eliminate the need for a decryptor and ensure business continuity, even when faced with ransomware. Heather highlights that, with strong backups, companies can avoid paying ransoms and focus on assessing potential data exfiltration.