The reality should be that, if sensitive data is stored in the United States, Canada, China, or England, it should be protected and treated the same. Retailer TJX's data-loss debacle happened within the United States. So while the recourses and risks vary from country to country, different technical controls generally aren't required.
That doesn't mean companies should let down their guard in assessing offshore outsourcers' security. In fact, information security pros should should tap into the fear, uncertainty, and doubt surrounding outsourcing; use it to insist on proper controls and standards; and bring those practices in-house where their own are lacking. The reality is that a Social Security number is a Social Security number, no matter where you store it or where the access threat comes from.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
