Romano Ramanti is Certified Ethical Hacker at Zurich Cantonal Bank. He is also a Swiss representative in the Payment Scheme Fraud Prevention Working Group at the European Payment Council (EPC). His main areas of activities are malware analysis, threat hunting, attack neutralization, darknet analysis, and vulnerability research.

In this interview, he shares his top tips on how businesses can strengthen their cybersecurity defenses. Are you curious about how to stay ahead of AI-powered threats or how to train employees to recognize cyberattacks? Romano offers expert advice and practical strategies to help you stay a step ahead of cyber threats. Take a look!

How can organizations stay ahead of AI-powered cyber threats?

The best way is to train employees specially on deep fakes. They need to know how cybercriminals perform their attack with AI and how to recognize these attacks. The tools are getting better but there are still some signs which can be recognized. 

Establish rules or codes to be asked when there is uncertainty about the authenticity of the person.

What are the key components of a resilient enterprise cybersecurity strategy in the face of evolving threats?

Some examples:

  • Assess own assets for potential vulnerabilities
  • Restrict access to sensitive Information
  • Set up a cybersecurity training for employee
  • Use 2FA
  • Patch software regularly. Set up a backup strategy.
In your view, what is the most significant cybersecurity trend that will impact businesses in the next year?
  • AI powered Cyberattacks
  • Cloud Security
  • Zero Trust Architecture
What strategies would you recommend for small to medium-sized enterprises with limited cybersecurity resources?

Same as the key components of a resilient enterprise security. There are a lot of free frameworks that helps small companies understand their cybersecurity posture. For example, the NIST Framework for Small Business who provides some key point for a cybersecurity strategy

How can organizations foster a culture of security awareness among their employees?

Only through continuous education. The most important point in an awareness campaign is to understand, how people perceive risks. Employees must understand and be motivated to change their behavior. Simple phishing attack simulation will not induce the desired impact