Hackmanac CEO Says Cybersecurity Must Be Managed as a Business Risk

Summary

Hackmanac CEO Sofia Scozzari argues that organizations should treat cybersecurity as a business risk, embed security by design, share threat information, and account for human factors and operational constraints.

Key points

• Scozzari says attackers collaborate and scale capabilities through as-a-service models, while defenders often share information less readily.
• She argues cyber risk should be managed as a strategic business concern because attacks can affect operations, reputation, and human safety.
• Legacy systems and operational risks can make patching known vulnerabilities difficult.
• She identifies credential misuse, poor security hygiene, insider risk, phishing, and social engineering as recurring human-related concerns.
• Her recommendations include embedding security by design, aligning cyber strategy with business priorities, and translating security intelligence for executives.

People