Lights, camera... cybersecurity?
You might think of Britney Hommertzheim's security role that way.
She is the Director of Information Security at AMC Theatres, and we spoke with her at the SecureWorld Kansas City cybersecurity conference, where she was presenting.
Here are some of the things she has to protect as an InfoSec leader at a theater company. "Movie content is one, advertising content is another. I have over 400 stores where I’m actually selling product, and I have over 13 million people’s personal information I’m protecting in my loyalty database.”
We asked Britney about cybersecurity program basics, or what you might think of as the building blocks of an information security program.
Here is what she told us are security essentials.
What are information security program essentials?
Britney led a session at the 2018 cybersecurity conference, and here are the things she believes to be building blocks of cybersecurity:
Why is inventory important to cybersecurity?
"When it comes to general awareness around hardware and software inventory, it's odd to think of inventory as a security or business function, but you can’t secure what you don’t know.”
Why are configuration management, vulnerability management and privileged access management essential for security?
“Management is key, and there are three aspects that fall under that. Vulnerability management, privileged access management, and configuration management. You have to make sure your devices were configured correctly, and maintain a vulnerability program, so not just patching. And be going through the whole process and looking at privileged access management. These are the people who have the keys to your kingdom. Are you monitoring, looking, and restricting to make sure the access is appropriate?”
She also says security is a culture, one that business must embrace in order to minimize risk. To create a culture of security, information security leaders must work on creating influence.
Britney already appears to have a growing amount of that: she leads security in her role, is in charge of communications for Women in Security Kansas City, and is an Advisory Council member of SecureWorld Kansas City.
Maybe these are the some of the reasons her session on "The Building Blocks of Cybersecurity" was so full.
We know this much: Her efforts are truly helping to secure the Kansas City region—and a movie theater near you!
