Sergio Albea is an IT Security Architect at SWITCH. He has worked within the dynamic field of security, focusing on ensuring robust protection against threats and vulnerabilities. His approach is divided in proactivity, leveraging advanced analytics and architectural design to preemptively mitigate risks and fortify defenses against potential breaches.  

Throughout his career, he has had to secure and manage a myriad of IT environments such as messaging platforms, Identity and Access Management systems, Information Protection mechanisms, DevOps, Azure Resources such as Databases, Networking, Storage, Scripting, and others.  

Currently, he is working at SWITCH, focusing primarily on educational organisations. In this role, he assists in conceptualising and developing strategies to support and protect client systems and mitigate potential security threats. He is dedicated to providing comprehensive security solutions tailored to the unique needs of the education sector.

In your experience, what are the most common misconceptions about cloud security? 

If I were to highlight one key point, it would be a common misunderstanding that once organizations activate security services to the cloud, they can disregard security concerns and rely on it the cloud provider. It is crucial to understand that the cloud provider and the organization must work together to ensure the most robust security systems for the cloud, with the aim of safeguarding their resources. 

What strategies would you recommend for small to medium-sized enterprises with limited cybersecurity resources?  

My recommendation for medium and large enterprises is to delegate their cybersecurity operations to external providers. To list some advantages: 

  • Cost Reduction: Software, hardware, and cybersecurity workers are expensive resources. The best way to manage these costs is to hire a company that encapsulates these services and provides everything you need, including protection during non-working days or hours. 
  • Updates: As we know, the world of cybercrime is constantly evolving, and what is valid and secure today may be obsolete tomorrow. IT service providers’ partnerships with cybersecurity experts accelerate the detection of emerging threats and help to anticipate them. 
  • Provider Expertise: Dedicated cybersecurity providers have the experience in preparing companies’ cybersecurity and preventing cyber-attacks as part of their day-to-day work. They usually have official certifications that guarantee the security of their programs and installations multiplying the guarantees of success. 
What are the best practices for building a culture of security awareness across an organization? 

Work together with the users. This means not just starting with default campaigns to increase security awareness, such as MFA or spoofing emails. Instead, we should understand and listen our users to learn about their day-to-day tasks and challenges. By gaining insight into their daily routines, we can identify potential security awareness campaigns tailored to their specific needs. This approach can make them more aware of possible risks during their daily activities and empower them to take proactive steps to enhance their security practices. 

Can you discuss a recent breakthrough in cloud-native security technologies? 

There are multiple ones but if I have to remark one of them, I would say Microsoft Copilot. It is an AI assistant integrated into Microsoft 365 apps which helps to eliminate tedious tasks from daily work, allowing humans to focus on creativity and problem-solving. 
However, this new service poses a significant challenge for information security teams. Copilot can access all the sensitive data available to a user, which is often excessive and can swiftly generate new sensitive data that needs protection. Before the AI revolution, the rate at which humans created and shared data already exceeded the ability to secure it, as evidenced by data breach trends. Generative AI accelerates this issue. 

What are the most effective ways to communicate the value of cybersecurity investments to stakeholders?   

I would certainly use cybersecurity cases highlighting the increasing sophistication and frequency of cyber-attacks, using examples of similar companies that have faced attacks and their negative consequences. In addition, I would provide a detailed risk analysis, including financial, reputational, and compliance risks, with vulnerability assessments and past breaches. Finally, I would share with them the potential financial impact of a cyber-attack, covering recovery costs, regulatory fines, revenue loss, and brand damage.