Episode #
43
Ventas Inc.’s Brian Palmer on Managing Cybersecurity Challenges in Real Estate
Show Notes
In our latest episode of the Future of Threat Intelligence podcast, Brian Palmer, Director of IT Security and Infrastructure at Ventas, Inc. highlights the critical importance of translating cyber risk into business language, making it comprehensible and actionable for executives and board members.
Brian shares his unique insights on balancing technical oversight with broader business objectives and the evolving challenges in cybersecurity, especially within the real estate sector. He also offers valuable perspectives on the impact of AI on phishing attacks and the essential role of continuous learning and networking for those aspiring to advance in the cybersecurity field. To close the chat, he describes his passion for mountaineering, likening seeing a huge summit in the distance and feeling overwhelmed but that once you break it down and go step by step, any problem or mountain is not so daunting.
Topics discussed:
The importance of translating cyber risk into business language for effective executive communication.
Strategies for balancing technical oversight with broader business objectives in cybersecurity.
Evolving cybersecurity challenges in the real estate sector, especially healthcare real estate.
The impact of AI technologies like ChatGPT on the sophistication of phishing attacks.
The necessity of continuous learning and networking for career advancement in cybersecurity.
Practical advice and real-world examples for implementing effective cybersecurity measures in business contexts.
Key Takeaways:
Translate cyber risks into business language to enhance executive and board understanding and decision-making.
Balance technical and business needs by aligning cybersecurity measures with business objectives and outcomes.
Communicate the potential business impacts of cybersecurity threats to ensure executive buy-in and support.
Leverage real-world examples from the news to educate and raise awareness about cybersecurity issues among employees.
Adapt cybersecurity strategies continuously to keep up with the ever-evolving threat landscape.
Foster a culture of continuous learning and curiosity within your cybersecurity team to stay updated on new threats and solutions.
Incorporate AI detection tools to counteract the increasing sophistication of phishing attacks.
Engage in networking with other cybersecurity professionals to share insights and strategies for managing emerging threats.
Evaluate your organization's unique cybersecurity challenges, especially if operating in niche sectors like real estate.
Develop hypothetical scenarios during interviews to assess candidates' problem-solving and adaptability skills in cybersecurity contexts.
Quotes from Episode
#1.) “I found it's about having balance, and it's about being able to understand what's key to the business. I've been at companies that were on the startup phase where our level of risk assessment was a lot more because growth was the most important thing and, say, security was less important. And I've been at places where my current company, we operate a little more like a bank, we're more of a real estate company, we're more risk averse and want to be a little bit more cautious with decisions we make.” (2:26-2:59)
#2.)“And as a great example, I use, you know, it used to be you tell people to look for phishing emails by looking for misspellings and other things you might see. And now with, you know, with the AI technologies and ChatGPT and other things like it, people can create perfectly wonderful phishing emails with zero typos in them. ” (7:47-8:04)