In the inaugural episode of the Net Impact podcast, hosted by Fred Menachem and presented by ThriveDX, the conversation dives deep into cybersecurity with Tim Roemer, Chief Security Officer at GMI, a secure technology solutions company.
A Glimpse into Roemer’s Career
Tim Roemer’s journey into cybersecurity began with a focus on counterterrorism at the CIA following the 9/11 attacks. His tenure included time in the White House Situation Room, where he witnessed firsthand how cyberattacks could be launched worldwide, impacting critical American infrastructure. Upon witnessing this evolving landscape, mitigating cyber threats became a rising priority. This realization shifted his focus toward the rising threat of cyberterrorism.
After his CIA tenure, Roemer transitioned into the Chief Information Security Officer for the State of Arizona, where he developed a comprehensive cybersecurity strategy. Roemer emphasized that cybersecurity isn’t just about technology, but leadership, risk management, and a deep understanding of policy, budgets, and business operations.
Cybersecurity’s Expanding Threats
The conversation between Fred and Mr. Roemer shed light on the growing threats in the digital world, highlighting how bad actors, including nation-states and cybercriminals, are evolving faster than many organizations can defend. Roemer explained that cyberterrorism isn’t just about stealing data–it’s about crippling a nation’s economy, infrastructure, and even endangering lives. He noted examples of attacks on critical infrastructure, such as water systems and healthcare providers, which can result in life-or-death situations.
The Importance of Sharing Cybersecurity Data
Roemer stressed that one of the biggest issues in cybersecurity is the need for more information sharing between organizations. Often, companies that experience cyberattacks avoid disclosing information due to fears of reputational damage or financial loss. Roemer argued, however, that sharing details about attacks, particularly indicators of compromise (IOCs), could help others in the industry bolster their defenses and prevent similar incidents.
Tackling Cybersecurity with Collaboration
Throughout the episode, Roemer emphasized the importance of collaboration across industries. In an interconnected world, cybersecurity cannot be the responsibility of a single company or government agency—it requires a united front. Roemer noted that companies like GMI, ThriveDX, and NightDragon are crucial in providing managed security services and working together to help protect organizations from cyber threats.
Making Cybersecurity Accessible
Menachem and Roemer also discussed the need to make cybersecurity more understandable and accessible to the general public. Roemer simplified key concepts like phishing and multi-factor authentication (MFA), stressing that small changes in cyber hygiene can significantly reduce the risk of cyberattacks. MFA, for example, decreases the chance of an account being hacked by 90%, making it one of the most critical steps individuals and organizations can take to protect themselves.
Cybersecurity Workforce Challenges
One of the pressing issues addressed in the episode is the significant gap in the cybersecurity workforce. With over 650,000 vacant cybersecurity positions in the U.S. alone, Roemer called for reevaluating how talent is recruited and trained. He advocates for removing the four-year degree requirement in favor of certifications and practical experience, noting that real-world skills are needed to address today’s cyber threats.
Roemer highlights that internships, apprenticeships, and bootcamps can provide the hands-on experience to build a strong cybersecurity workforce. His call to action is clear: organizations need to focus on providing opportunities for underrepresented groups, including women, minorities, and those in rural areas, to ensure that the cybersecurity field becomes as diverse as the threats it faces.
Tim Roemer’s insights in this episode of Net Impact powerfully reminds us of the importance of collaboration, continuous improvement, and diversity in tackling the global cybersecurity crisis. As the digital threat landscape evolves, Roemer’s experiences from the CIA to the private sector offer valuable lessons on how organizations can better protect themselves and prepare for the future. The discussion is a wake-up call for businesses and governments to take cybersecurity seriously before a digital catastrophe occurs.
Stay tuned for more insightful discussions on Net Impact, where cybersecurity professionals like Tim Roemer share their stories, strategies, and solutions for building a safer digital future.
Protect Your Organization from Phishing
Explore More Resources
- Article, News
- Article, News
- Article, Blog
- Article, Blog
Your Trusted Source for Cyber Education
Sign up for ThriveDX's quarterly newsletter to receive information on the latest cybersecurity trends, expert takes, security news, and free resources.