The Ever-Evolving World of Cybersecurity: Insights from Visa’s CISO
In the digital age, cybersecurity isn’t just a technical challenge; it’s a fundamental business imperative. As the landscape of threats continues to evolve, staying ahead requires a proactive, forward-thinking approach. We recently sat down with Subra Kumaraswamy, Senior Vice President and CISO at Visa, to glean insights into the strategies and trends shaping the future of cybersecurity.
A Career Forged in Diverse Experiences
Kumaraswamy’s journey to the top of Visa’s cybersecurity operations is a testament to the power of diverse experience. His background, spanning software engineering, data center architecture, cloud services, and entrepreneurship, provides him with a holistic understanding of the challenges and opportunities in the field.
Did you know? The average cost of a data breach in 2023 was $4.45 million, according to a report by IBM. This underscores the critical need for robust cybersecurity measures.
His early work involved figuring out how to offer internet services across the University of Notre Dame before the dot-com boom. Later, experiences at companies like Netscape, Sun Microsystems, eBay, and Intuit honed his skills across various disciplines. This breadth of experience is a key asset in the complex world of digital security.
“In my journey, what defined me was the diversity … of roles,” Kumaraswamy says. “I was able to be a developer. I was able to be a data center architect. I was able to run services in the cloud, and I was able to be an entrepreneur. And all of this helped me to create much more of a holistic view.”
The Core Pillars of Visa’s Cyber Strategy
At Visa, the approach to cybersecurity is built on several core pillars, including a relentless focus on innovation, a commitment to talent development, and a proactive stance against emerging threats. Kumaraswamy emphasizes the importance of not becoming complacent, always striving to improve and anticipate future challenges. This “glass half-empty” perspective, as he calls it, is essential for maintaining a strong security posture.
Visa’s cybersecurity team, comprising over 1,000 professionals, is structured around key functional areas: governance, risk and compliance; access control and management; cyber engineering; cyber defense; cloud security; and security architecture and engineering. The goal is to build a cohesive security ecosystem. This structured approach allows for focused expertise in each critical domain. Furthermore, their close work with Rajat Taneja, Visa’s president of technology, highlights the importance of a cyber-first mindset at the highest levels of the organization. This alignment is crucial for integrating security into all aspects of technological innovation.
Pro Tip: Regularly assess your organization’s cybersecurity maturity using frameworks like NIST or ISO 27001 to identify gaps and areas for improvement. Learn more about the NIST Cybersecurity Framework.
Emerging Trends and Technologies Shaping the Future
Visa is at the forefront of integrating advanced technologies like AI to improve their security posture. With over 80 GenAI initiatives underway, they are actively exploring how these technologies can enhance various aspects of cybersecurity. Their focus is not only on protecting their own systems but also on extending best practices to their partners and customers. This holistic approach strengthens the entire payment ecosystem.
Kumaraswamy shared that initiatives include what is called a “shift left” process within Visa, which is now enabled with agentic AI. This has reduced the time to find bugs in the code and has reduced the time to investigate incidents. Visa’s efforts also extend to providing value-added services to mid-sized banks and credit unions. This collaboration aims to ensure that even smaller institutions can benefit from robust cybersecurity practices.
The rise of Generative AI: As AI technologies mature, expect them to play a more significant role in threat detection, incident response, and vulnerability management. Early adoption of AI-driven security tools will provide a significant competitive advantage. Gartner defines the scope of generative AI.
Staying Ahead of the Curve: Talent and Innovation
A critical element in any cybersecurity strategy is the development of a skilled workforce. Visa’s Visa Payments Learning Program is a prime example of how to address the talent shortage in the industry. Offering training and certifications to employees, partners, and customers is essential. These proactive measures ensure that the payment ecosystem has a robust, well-trained talent pool.
Kumaraswamy highlights the importance of staying vigilant, particularly in light of emerging threats such as zero-day vulnerabilities. The response to the Log4j vulnerability in 2021, requiring an around-the-clock effort, served as a critical learning experience, informing Visa’s approach to future incidents. This constant state of preparedness is essential in today’s evolving threat landscape.
Frequently Asked Questions
What is the biggest challenge facing cybersecurity professionals today?
The constant evolution of threats, including the sophistication of cyberattacks, the shortage of skilled professionals, and the rapid adoption of new technologies.
How is Visa addressing the skills gap in cybersecurity?
Through the Visa Payments Learning Program, offering training and certifications to employees, partners, and customers.
What role is AI playing in Visa’s cybersecurity strategy?
AI is being used to enhance threat detection, incident response, vulnerability management, and code analysis, among other functions.
What advice would you give to organizations looking to improve their cybersecurity posture?
Prioritize a proactive, “glass half-empty” mindset; invest in talent development; leverage advanced technologies like AI; and foster a culture of collaboration and continuous improvement.
How can organizations stay ahead of the curve?
By staying informed about the latest threats and vulnerabilities, investing in regular training and education, and implementing robust security measures, organizations can reduce their risk.
What key initiatives have been deployed by Visa to build a stronger cyber-security posture?
Some initiatives include leveraging AI to discover bugs faster and reduce the time to investigate incidents; sharing best practices with customers; and offering value-added security services to mid-sized banks.
What is the biggest takeaway from Visa’s approach to cybersecurity?
The emphasis on a comprehensive, proactive approach that considers talent, technology, and a constant state of vigilance. This approach helps ensure that the payment ecosystem is resilient against emerging threats.
Are you interested in exploring more about cybersecurity trends? Comment below and let us know what topics you’d like to see covered in our future articles. Also, subscribe to our newsletter for the latest industry news and expert insights!
Worth a look