Magazine menu Close Magazine menu

careers

Latest stories

cybersecurity champions

Cybersecurity champions could be your secret weapon in raising employee cyber-awareness

  • min read
    • Cyber incidents continue to rank as the top risk for Financial Services companies. With 57 percent of banking executives saying their primary cybersecurity concern is phishing attacks targeting employees,  cybersecurity needs to be everyone's business – not just the IT department's problem. A cyber-secure work culture will make businesses more resilient to threats. According to Forbes, business-reported cyberattacks keep rising each quarter. Meanwhile, "The cyber skills gap continues to widen, with 3.4 million vacancies for cyber pros globally this year, up from 2.7 million in 2021." Employee behavior is one of the biggest factors behind cybersecurity incidents. Change how your employees understand cybersecurity with a cyber-aware work culture, and you'll substantially reduce the risk of compromise. One way of raising cybersecurity awareness at work is through a cybersecurity champions program. Forbes reports phishing, malware-spiked emails, social engineering and compromised credentials account for nearly 30 percent of cyberattacks. As all these are linked with lack of employee cyber awareness, everyone getting up-to-speed on today's cyberattacks could prevent many attacks. Why cybersecurity champions change business culture Lena Smart, Chief Information Security Officer (CISO) for MongoDB, calls cybersecurity champions the "cheerleaders and supporters of security" across an organization. MongoDB is a database platform to build web and mobile applications. It powers everything from popular online game Fortnite to dating site eHarmony's real-time communication system. The company is headquartered in the US and has 2,000 employees globally. "We need to assure customers we're keeping our applications secure and we want to show our internal customers they're working in a secure environment," says Smart. MongoDB's cybersecurity champions program was one of Smart's first initiatives when she joined the company last year. A 20-year industry veteran, she implemented two similar programs in previous CISO roles at international electronic trading platform Tradeweb and another at New York Power Authority. Smart says security experts inside an organization may have a limited perspective because they're looking through a tight lens. Weaving security through software development Security champions schemes are adopted most in software development, particularly with the trend toward DevOps. DevOps means combining software development and IT operations teams and processes to speed up development. As the need grew to scale DevOps projects faster while minimizing software vulnerabilities, organizations looked for ways to embed security into the development process. They called the approach DevSecOps. "Security champions programs aim to build a better security culture and get DevOps to create secure software more reliably," says Dan Cornell, Chief Technology Officer (CTO) with US application security company Denim Group. Cornell is a big proponent of cybersecurity champions and has helped many organizations launch programs. He says their aims vary depending on the industry, regulatory environment and company culture. For DevOps, he says, champions make security knowledge more accessible to the development team. Having run successful security champions programs outside of software development, Smart says the rules are transferable. "There's no difference in how you set it up from one company to the next." The champions are colleagues from different roles, teams and departments. Smart particularly wants participants who don't have "security" in their job title or responsibility. "The champions want to learn and understand security and how they can help the company to be more secure," she says. At MongoDB, the program is voluntary and relatively informal. Champions are encouraged to attend monthly meetings with ideas for training and other things they want to do. Building cybersecurity culture from the bottom up While the C-Suite's involvement is crucial in setting the tone and providing resources, the real strength of a cybersecurity culture is in the entire workforce's commitment and enthusiasm. Robust protection against cyber threats means building a cybersecurity culture from the ground up. Within a good security culture, people engage with cybersecurity, leading to growing awareness which reduces business vulnerability to attack. When staff feel invested in the organization's security, they become its first line of defense. When you foster a sense of joint initiative, employees at all levels help build the culture and security becomes ingrained in their daily practices. UCL Department of Security and Crime Science lecturer, Ingolf Becker, says a security champions program works because it's a two-way street. "It promotes security at all levels, but it's also an opportunity for management to get feedback about what's happening on the ground." Smart says sometimes the best ideas for improving security comes from people who "don't live under the scrutiny of the CISO every day. It gives you, as the CISO, a view you wouldn't otherwise have." Champions making cybersecurity communication clearer Smart measures the success of a champions program by how much feedback she gets on initiatives and efforts. For example, a new data-retention policy for a communication app the company was using: "Data-retention policies can be disruptive. We wanted to make sure we were asking the right questions and giving the right information to those affected," she explains. She put the champions to work. They met as a group and reviewed the draft memo. The champions took it apart, discussing what could be improved, what needed more information, and so on. That input, she says, saved her security team a lot of angst. "We finessed what was going to be a disruptive piece of communication," she says. She knew it worked because emails came in thanking them for the clarity of the message. People appreciated the efforts put in by those outside the CISO's core team. How to implement a cybersecurity champion program Becker says security champions must not be security people. "They're employees who are 'one of us,'" he says. "I think most organizations could benefit from having this local expertise about what security means to an organization." He says at organizations he's worked with, the program was often organic – started by people or teams who took it upon themselves to promote security. In those instances, formalizing the program helps to provide training and resources to develop it. To start a program, Smart recommends CISOs get executive support. At MongoDB, she started by pitching the idea to her manager, the company's CTO. "He loved the idea," she says. "Support from the top is fundamental, or it won't be a success." You must also work out what kind of commitment participants need, based on how often the champions meet and other tasks they do. The next phase is to promote the program and recruit volunteers – an online survey is a good way. After pitching her idea to the CTO, Smart enrolled the company's communication experts to raise awareness, including the benefits of the program to the organization. When employees stepped forward, their supervisors had to sign off. Smart had conversations with the managers who were uncertain and explained how volunteering could fit around the employee's day-to-day role. "Because it's voluntary, some months you may have five people in the room and some months 20," Smart says. "Don't be disheartened if the numbers go down. They'll come up again." To grow the program, look for ways to promote the champions' work and impact. MongoDB includes "day in the life" stories about the champions in the company's security newsletter. Championing security helps develop careers Gartner says cybersecurity champions programs are a zero- or low-cost way to accelerate your security message. Some organizations may offer incentives, and in DevOps scenarios, being a champion may become a full-time role. At MongoDB, the champions aren't there for perks, but there are benefits. They learn things and serve as leaders to their peers. Smart, too, found an unexpected benefit: Two of the champions later joined her team. "They're now a bridge between the old and new ways of security," she says. Becker believes just about any organization could implement a cybersecurity champions program. But there's one caveat. "You must be willing to listen and change based on the input of champions," he says. Smart notes the champions share a common goal. "We're all trying to solve the same problem: Keeping the data safe and the bad actors out," she says. The program lets her talk to people she rarely speaks to about ways to improve security. "It's a linking of the groups and a linking of the minds," she says. If you want to improve your security culture – and are willing to listen to employees with diverse perspectives – a security champions program is a great way to bring about long-lasting change.
IT executives 2040

8 ways Generation Z will transform the future workplace

  • min read
    • Generation Z (Gen Z) – those born between 1997 and 2012, now in their teens and early twenties – is making an impact on the world. Many brands have aligned their products and communication with the generation's tastes and preferences. Employers are adjusting their business processes to accommodate their arrival. Kaspersky welcomes hundreds of Gen Z interns annually, sparking curiosity about what tech industry leaders might be like in 2040. Here's how we think Gen Z will transform the future workplace. 1.   Exploring vast information efficiently Gen Z is the first generation surrounded by tech and the internet since birth. Information on smartphones is their natural experience and knowledge. They effortlessly navigate and integrate torrents of information. They don't mind not knowing things because they can swiftly find the answer. 2.   Developing deeper analytical skills The inclination to dive into pools of information may also lead to shallow and fragmented thinking. Without a critical approach, it could challenge Gen Z as future tech industry leaders. Gen Z must balance leveraging vast information with deep, analytical thinking to become well-rounded and effective in their work. 3.   Moving away from vertical hierarchy As future managers, Gen Z may establish companies with horizontal management structures. In these organizations, transparency, trust and teamwork will take center stage. By prioritizing these principles, Gen Z leaders will build businesses that empower employees and promote collaboration, where each individual's voice is heard and respected. This shift towards more inclusive management could pave the way for more innovative and progressive workplaces. 4.   Valuing own and others' personal boundaries Gen Z places high value on healthy work-life balance. They firmly believe work should bring similar satisfaction to socializing or leisure. It's crucial to allow distance and dedicate time for relaxation. One way to achieve this is refraining from sending messages outside work hours and respecting their boundaries. 5.   Ever-evolving leaders with backgrounds in multiple career fields These young people don't show the same rigid preferences or brand loyalty as previous generations. They can imagine more possibilities, so they fearlessly explore new opportunities and embrace change. They don't hesitate to switch companies and even transition between different career fields. While the average person may change professions three to seven times in their lifetime, Gen Z may have some 10 to 15 different careers over their working lives. Wide expertise and experience open the door for innovative approaches and the creation of novel cross-platform products across different industries. 6.   Being proactive Many managers observed that Gen Z's proactivity stands out. They readily propose creative and innovative ideas that transcend the boundaries of their roles and departments. 7.   Building unique tech startups What's more striking is their willingness to embrace mistakes as part of learning. Unlike previous generations, Gen Z won't wait for the perfect moment to launch a product. They act in the present and don't fear making mistakes. Gen Z will likely lead the charge as CEOs of numerous tech startups, fueled by unconventional product ideas. 8.   Becoming the youngest generation of leaders This boldness and decisiveness will mean a significant drop in the average age of startup CEOs. Young people and even teenagers are already proving successful in running businesses. Generation Z is the future of the IT industry. The hundreds of young people we welcome into internships at Kaspersky each year gain an opportunity to unlock leadership qualities. They already possess the essential traits – we nurture their potential, refining soft skills and technical know-how. Participating in international student competitions, like Kaspersky's Secur'IT Cup or education and internship programs, can be instrumental in the journey of these young people. With determination and support, they will shape the industry and leave a lasting impact on the world.
future cybersecurity jobs

7 new roles we’ll soon see keeping business secure

  • min read
    • Technology penetrates every sphere of our lives, and more devices mean more cybersecurity challenges. How we protect systems is evolving with technology and threats: Routine work like monitoring and response is being automated. But cybersecurity isn't getting less complex – businesses will soon need new, more creative, more diverse roles. While they may seem futuristic, some already exist in one form or another. Given long-term trends, leaders should start planning to recruit for these new roles, coming soon. 1.  AI mentor The rise of AI-based technologies like ChatGPT and voice assistants like Siri and Alexa made new tech more accessible while bringing new concerns around privacy and security. AI's control, regulation and monitoring requirements go beyond product management and development expertise. William Gibson's 1984 science fiction book Neuromancer imagined we'd one day have 'Turing Police' to control AI and AI-based systems, stopping them evolving and becoming independent. Turing refers to famed UK mathematician and computer scientist Alan Turing's test to distinguish humans from machines. A need for firm limits on AI is little disputed among experts, with a range of tech leaders, including Elon Musk, signing a open letter asking for a pause in AI development in March 2023. AI Mentors will assess and control AI technology. They may also teach AIs, control access to data and constrain evolution – you might call it, being AI's parent. As AI's complexity and sophistication grows, there will be growing demand for such experts. AI mentors could also develop 'stop' buttons to prevent systems operating on their own. They may also develop protection against malfunction and alternative rescue plans if computers are out of service. 2.  Digital footprint consultant Leaks and breaches negatively affect any brand. Cybercriminals often use threats of reputational damage to extort money from companies once inside systems. A digital footprint consultant will work to protect your brand. However, there's no need to wait for a digital footprint consultant to come on board before you develop strategies to restore your brand reputation after a data leak. 3.  Cyber immunity developer Cybersecurity will change as businesses are forced to rethink how they develop new tech. Embedding cybersecurity principles from the start makes cyber immunity possible – systems so secure that the cost of hacking them isn't worth the reward. Demand for cyber-immune products will see employees scrambling to hire designers and developers with security-first skills. 4.  Threat endurance manager 2022 was a costly year for cyberattacks, with high-profile big tech names like Twitter, Uber and Rockstar Games all hit. Cybercriminals don't shy away from attacking public services and life-saving institutions either, with several universities, the UK's National Health Service and the Red Cross among those attacked. Cyberattacks interrupt production and business processes, pose reputational risks and lead to big financial losses. Health insurance giant Medibank reported a ransomware attack cost them 26 million US dollars. They'll be responsible for business continuity and protect companies by controlling IT systems, responding to cyberattacks and managing software and human errors. 5.  Cyber investigator Cyber investigators already exist, but their work will become more complex and diverse as digital systems get more sophisticated and automated. These specialists normally manage the aftermath of a security breach, covering the whole investigation and eliminating the threat. At Kaspersky, they collect evidence about an incident by analyzing log files and network events, finding indicators of compromise and more. New-generation cyber investigators will be generalists with skills in programming and hacking, but also psychology and decision-making in volatile conditions. They'll also understand robotics and AI, as they must work with emerging systems. 6.  Digital bodyguard Like bodyguards in the physical world, we'll want to hire consultants to protect our digital identities. These bodyguards will protect against doxing – when attackers publish personal data online for revenge – and cyberstalking. They'll clean our accounts and digital history, and guide and support our virtual lives. Pew Research Center found more than 40 percent of US adults experienced online harassment in 2020. Sometimes, online harassment is linked with offline harassment and even violence. Digital bodyguards will help protect us from these kinds of threats, and disrupt and identify the offender when they happen. They may also give victims emotional support. Businesses that provide digital technologies must consider how they'll facilitate digital bodyguards' work protecting their clients. 7.  Space cybersecurity engineer Satellites are the most conspicuous piece of space technology in daily life, used in communications, navigation systems, broadcast media and more. Our reliance on satellites makes them attractive to threat actors. The space industry needs dedicated specialists to prevent attacks, particularly securing operational systems like navigation, engine control and life support. With the advent of space tourism, asteroid mining and new space stations, there'll be rising demand for out-of-this-world cybersecurity experts. What does it all mean for business? The cybersecurity landscape is complex and always changing, giving rise to new roles like these predicted. It's easy for businesses to get left behind. Examples of expensive data breaches at big-name institutions suggest those who invest in top cybersecurity will save time and money long-term. For those developing future technologies, embedding cyber immunity is becoming necessary, especially if your tech will be used in critical services like healthcare and infrastructure.
women who shaped computing, careers, education, history Woman uses laptop on desk alongside model space rocket. Portraits of notable women hang on her wall.

We should all know about these women who shaped cybersecurity

  • min read
    • According to Cybercrime Magazine research, women held 25 percent of cybersecurity jobs globally in 2022. Surely cyber and computing careers are for everyone. So why are many women tuning out? Today's working wisdom is that diversity benefits teams, but there's slow progress in getting more women to join technology-led careers and keeping them on board. Human computers: The first data scientists The word 'computer,' coined in 1613, was first used for humans who performed computation. Many of the best were women: Nicole-Reine Etable de la Brière Lepaute helped predict Halley's Comet's return in 1758. A century later, Maria Mitchell plotted the planet Venus's motion, earning an astronomy professorship. When the US Civil War ended in 1865, war widows needed to support themselves. Women were hired as human computers. Agnes Meyer Driscoll, known as 'Madame X,' led the decoding of Japanese ciphers and manuals for the US during both world wars. Women solved the ultimate Enigma Britain's Alan Turing is famed for cracking the Nazi's 'Enigma' code during World War II, but it wasn't the work of a lone genius. Of Bletchley Park's codebreaking team, 75 percent were women. Turing's colleague Joan Clarke worked out how to speed up decoding double-encrypted messages, but unlike many of her male colleagues, her technique wasn't named after her. Clarke's job title didn't match her expertise – there was no 'senior female cryptanalyst' role, so she was given the job title 'linguist.' Painstaking calculation devalued as 'kilo-girls' The dominance of women as human computers cloaked an inconvenient truth. Their work was on average better, and they were cheaper than male counterparts. The Harvard Computers, mockingly called "Pickering's harem," supported Edward Pickering at Harvard Observatory in the 1880s, doing work men and scholars found tedious, unpaid or at a fraction of what men earned. The term 'kilo-girl' came about in the 1940s to describe complex calculations seen as 'women's work.' We measure computing power in gigabytes or terabytes, but they measured kilo-girl hours – one kilo-girl was a thousand hours of painstaking calculations. The kilo-girls work was far from trivial: In the 1950s, Gladys West's calculations for the US Naval Weapons Laboratory led to GPS's development. Computing becomes a man's world By the 1960s, human computing had given way to machines. In the 1940s programmers were mostly women, but by the end of the 1960s women made up 30 to 50 percent. Women were still paid less and few were promoted to leadership. The perception computing is for men and boys started at home. A 1984 report showed 1 in 5 girls used a computer at home, compared with 1 in 2 boys. Female computer science graduates peaked in 1984 at 37 percent, before steadily declining. Academic Wendy Hall says by the 1990s, men led professional computing and computers "were sold as toys for boys." Ten women from computer history to know Ada Lovelace invents the first algorithm Publishing the first algorithm in 1843, Ada Lovelace is said to be the world's first computer programmer. She realized Charles Babbage's Analytical Engine could do more than calculation: Combining mathematics and analysis. Ada Lovelace Day celebrates women's achievements in science, technology, engineering and maths (STEM) and encourages young women to follow her path. Hedy Lamarr averts the Cuban Missile Crisis 1940s Hollywood actress Hedy Lamarr co-invented a frequency-hopping method to control torpedoes remotely without the risk of signal tracking or jamming. Naval ships were using the technology by the 1962 Cuban Missile Crisis. It later became part of Bluetooth and Wi-Fi. Grace Hopper invents new ways to code Grace Hopper created the first compiler for a programming language. She programmed and wrote a comprehensive manual for an electro-mechanical computer based on Babbage and Lovelace's Analytical Engine, Harvard Mark I. She wasn't credited for this but is widely miscredited for coining the term 'bug' when a moth caused her computer to malfunction. She later developed computer programming language COBOL (common business-oriented language) and invented new symbolic ways to write code. Margaret Hamilton took us to the moon The 1969 moon landing wouldn't have happened without Margaret Hamilton, who programmed Apollo's flight software.It needed more 'human computing:' After Hamilton's programming, seamstresses hardwired the code by threading copper wire through magnetic rings. Elizabeth "Jake" Feinler organized the internet At Stanford University in 1969, Elizabeth "Jake" Feinler created the first internet directory, ARPANET, alongside mostly female staff. By the early 1970s, they'd put together the first WHOIS directory of web domain ownership. Feinler suggested categorizing domains by where the computer was, like .edu domains for educational institutions. Women who built new audiences for technology Organizing, building relationships and human factors – often thought of as female traits – are critical in computing projects' success and creating demand for new services. Joan Ball set up the first computer-aided dating service in 1964. In 1988, Stacy Horn started a community in New York, the East Coast Hang Out (ECHO,) where users could chat online. Game designer Brenda Laurel's research showed girls wanted to play more interactive character computer games. In the 1990s, her company Purple Moon developed a best-selling game series inspired by that research. In the 1970s, Joan Margaret Winters researched how software should consider human factors for IBM's SHARE project. When you see the iconic trash symbol on your Apple Mac, thank Susan Kare. She worked with Steve Jobs to design its original icons. Today's influencers for women in cybersecurity When young people see people who look like them succeed in a career, they're more likely to choose it. For women considering going into cybersecurity, there's no shortage of inspiration. Parisa Tabriz, the self-styled "Security Princess" (official title: Director of Engineering,) runs Google's security testing labs. Eva Galperin, Director of Cybersecurity at Electronic Freedom Foundation (EFF,) fights for digital privacy, security and civil liberties. Eva Galperin helps women secure their devices against stalkers and spying ex-partners. Rebecca Bace's threat intrusion detection work at the US National Security Agency contributed to famous hacker Kevin Mitnick's arrest. The cybersecurity community nicknamed her 'Den Mother' for her vital mentorship and advice and posthumously inducted her into the 2019 Cyber Security Hall of Fame. Dr. Anne-Marie Imafidon MBE creates skills training and certification to encourage young women to pursue cyber careers through her company Stemettes. Jane Frankland, security entrepreneur and author of InSecurity: Why a failure to attract and retain women in cybersecurity is making us all less safe, helps the C-Suite (senior management) attract and retain women in cybersecurity. Attracting and retaining more women in IT careers In the UK in 2022, just 19 percent of IT professionals were women. But in many countries, such as those in Central Asia, women make up nearly half of the IT workforce. It's the gender-equality paradox: In countries with less gender equality, educated women seek careers with more income security, while in countries with better gender equality, women avoid careers said to discriminate against women. There are green shoots of progress. Kaspersky's Women in tech report surveyed women in four global regions. Encouragingly, 57 percent say gender equality is improving in their organization. Despite this, 44 percent think male colleagues progress faster. In the report, Dr. Ronda Zelezny-Green, Co-Founder and Director of Panoply Digital, says change is slow because "too much activity around gender equality in IT focuses on one-off gimmicks and band-aid solutions that can be spotlighted in the press, instead of focusing on female employees and actions that will make a sustained difference in their professional lives." Dr. Zelezny-Green thinks we should entice more women into the industry by creating new products and services for women. Widely-reported diversity problems with Artificial intelligence (AI) could be seen as an opportunity: "There's huge potential in telling the stories of Timnit Gebreu and Joy Buolamwini, black women leading the charge for more ethical and inclusive AI design. These stories make inroads in IT and tech roles where women are currently underrepresented." In a prosperous future, we won't need to ask "Where are the women in cyber?" They're not hiding under the desk. They're making change, but in another industry. We're on the right path, but it's a long journey ahead. With more women, we can better create products that represent users and benefit from a gender-equal computing industry.
neurodiversity interview nicola whiting

How cybersecurity businesses are welcoming neurodiverse talent

  • min read
    • Neurodiversity's importance in organizations is gaining steam, with many large, tech-rich enterprises like Ford, IBM and Microsoft reforming their HR processes to ensure they recruit and retain neurodiverse talent. Neurodivergent people have conditions that mean they think differently than others, for example, autism, attention deficit hyperactivity disorder (ADHD) and dyslexia. I asked Nicola Whiting MBE, co-owner of Titania Group and NeuroCyber board member,  why neurodiversity matters in cybersecurity and how businesses can be more inclusive and supportive of neurodivergent employees. Gemma: Why is neurodiversity important? Nicola: Neurodiversity – where you have many different thinking styles and perspectives – increases the range of ideas in a business, which means competitive advantage in innovation and resilience. It's the opposite of groupthink – when everyone has similar ideas, so businesses stagnate and make poor decisions. More personally, being autistic, I'm saddened by how many brilliant neurodivergent people struggle to get jobs in our industry, despite the known skills gap. JPMorgan Chase reported in 2021 that neurodivergent employees in certain tech roles may be up to 140 percent more productive than neurotypical colleagues. However, businesses still struggle to build inclusive practices that let all neurotypes thrive. I want to help change that. You're on NeuroCyber's advisory board. What are its aims? NeuroCyber's founder and CEO, Mike Spain, has a neurodivergent son. He saw too few opportunities for neurodivergent people in cybersecurity and wanted to change that. NeuroCyber believes in inclusion at every level – over half the board are neurodivergent. We're driven to improve career outcomes for neurodivergent colleagues, enriching the sector and reducing the UK's cyber skills gap. Why does the cybersecurity industry especially benefit from neurodiversity? In cybersecurity, everything we do is either innovation – creating new things – or resilience against attack and business threat. Neurodiversity is essential for both. For example, if you follow the principle 'to defeat an attacker, you must be able to think like an attacker,' you need a variety of neurotypes because attackers are similarly varied. What about in leadership? Should boards and C-suites consider neurodiversity? Absolutely. Boards should be especially wary of groupthink. Many innovative, well-known entrepreneurs are neurodivergent, like Richard Branson, who is dyslexic, and Elon Musk, who is autistic. There are also many neurodivergent industry leaders who don't disclose the fact because they fear stigma. Which cyber organizations are 'doing it right' with neurodiversity? One organization I admire is Genius Within, founded by Dr. Nancy Doyle. They believe in creating inclusive workplaces, allowing neurodivergent people to thrive and maximize their talents and strengths. What's your advice for companies that want to become more diverse and inclusive of neurodiversity? Follow the principle of 'nothing about us without us' (NAUWU.) Teams that can drive their processes and practices are more engaged and have better outcomes. You should also acknowledge that people have unconscious bias that draws them to prefer working with people that look and think like themselves. You can see it in the questions we prioritize in recruitment like, "Will this person fit with the team?" rather than, "What new skills and talents will they bring, and how will we support them?" There's plenty of fantastic advice on reducing bias in hiring and retaining team members, much of which is free. Companies needn't look far to learn how to improve their processes, practices and culture for greater diversity and inclusion. What will organizations gain if they take action on neurodiversity? Taking action on neurodiversity can mean benefits in terms of growth, innovation and resilience to risk. You'll also gain the personal benefits of inclusive, welcoming work environments. It always pays to diversify. Opinions reflect those of the expert. Interview has been edited for clarity.
data ethics interview

How data ethicists are helping tech business be better

  • min read
    • Using data responsibly is a hot topic. Tech companies must ensure they don't cause harm, for example, by breaching consumer privacy or reinforcing bias through automated decisions. It's a moral and legal question, but it may be unclear how businesses and governments should approach their data responsibilities despite increased regulation. We still see egregious data use practice. Alice Thwaite is technology ethicist and responsible owner for ethics at OmniGOV, MG OMD, working with the UK government on communications and advertising. We chat about what data ethics means in practice. Gemma: What does it mean to be a data ethicist today? Alice: Ethics is the study of how to live. An ethicist takes a theory of how humans want to be treated and how we should interact with the wider world, and thinks about how an action or technology could contribute to that goal. We use ethical methodologies and knowledge about the consequences of a technology or business model to transform the business into one that prioritizes ethics. Businesses have always operated in the realm of ethics, but usually without a systematic approach. Ethicists co-create frameworks with stakeholders like customers, colleagues and wider society so that an organization's values become critical in business decisions. What does that look like in practice? First, we help organizations understand where they're making ethical decisions and show how they'll need a more systematic process to reach their ethical goals. Second, we educate organizations on ethical methodology and issues. Third, we assess practice to understand what the company wants to prioritize and how current practice meets ethical goals, making suggestions like 'ethical pilots.' Finally, we implement and measure ethical pilots so they can become policy. We don't work in a vacuum – we must be in constant contact with various communities. For example, before establishing diversity, equity and inclusion (DEI) initiatives, a company might think racial equality is important but have no roadmap to get there. With an influence campaign, education, auditing and an implementation program, they may still have a way to go. But they're now measuring ethnicity pay gap and thinking about inclusive work environments for different people. They can keep following the 'influence, educate, assess, implement' process to fruition. Where do organizations start? What tips do you have for those keen to start doing ethics? Hire someone to build an ethical program and link them with a sponsor who can ensure the organization implements their recommendations. They may have a degree in philosophy, international relations, social science or community work experience. Ensure they can learn as much as possible about business ethics and support their attempts to transform the culture. Those in data security or compliance should recognize an ethicist has different processes. The goals may be similar, but the process aligns more with social science and humanities methods. What questions should organizations wanting a data ethicist ask? Are we committed to change? Do we want a world prioritizing human values like democracy, dignity and freedom? Are we prepared for the discomfort that comes with changing procedures? If you're prepared to change, write a job description incorporating things I've mentioned and encourage your team members to apply. Opinions reflect those of the expert. Interview edited for clarity.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries