BISO: Enhancing cybersecurity in modern enterprises

For enhanced cyber threat protection, the role of a business information security officer has become essential in the modern era. A BISO acts as the link between operation and security teams.

By connecting the dots between business and cybersecurity functions, a BISO enhances data loss prevention, risk assessment and compliance, according to Ryan Hebert (pictured), business information security officer, New York Stock Exchange and Fixed Income and Data Services business units, at Intercontinental Exchange Inc.

“We acquired the New York Stock Exchange in 2013, and then we got really into the mortgage technology space,” Hebert said. “That brought about a whole set of availability issues from a cyber perspective. I have a peer who runs the mortgage technology side as a BISO. I have another one who does our traditional brick-and-mortar derivatives. All the information that’s coming from all those different products that we provide our customers, we can provide to you through data services.”

Hebert spoke with theCUBE Research’s Dave Vellante and Shelly Kramer at the RSA Conference, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed the importance of a BISO in the cybersecurity field. (* Disclosure below.)

Intercontinental Exchange’s Ryan Hebert talks with theCUBE about the importance of a BISO in the cybersecurity field.

How artificial intelligence fits into the BISO big picture

Since AI is now providing cutting-edge innovations, such as ChatGPT, embracing it has become top of mind for enterprises. As a result, an AI experience is part of the NYSC, with the BISO role being key in this objective, according to Hebert. 

“Obviously, AI is the thing that everyone’s talking about,” he said. “It’s the topic of mind, and we’re hitting it from three different angles. We’re partnering with companies that are building things. We’re building our own AI experience that we’ve built through at NYSC … three different tranches of AI.”

As large language models and generative AI take center stage, new vulnerabilities are being created by these models. This is why role-based access control is needed, and a BISO is part of the team that helps address these concerns, Hebert pointed out. 

“You’ve got machine learning, you’ve got large language models and you’re also building a model where you either inform with customer data or you don’t,” he said. “Are you going to hand them a model that’s already informed? How are you going to keep it trained? It’s really a privacy concern in terms of what data’s going to go in, who can see it. Role-based access control of access to the query output is really big for us.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE Research’s coverage of the RSA Conference: 

(* Disclosure: TheCUBE is a paid media partner for the RSA Conference. Neither RSA Conference LLC, the sponsor of theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE