Allegiant’s Dan Creed on Navigating the Risks of Deepfakes in Corporate Security

In this episode of Ahead of the Breach, Casey speaks with Dan Creed, CISO of Allegiant Travel Company, who shares his expertise on the evolving landscape of cybersecurity. They discuss the alarming rise of deepfake technology and its implications for corporate security, including a compelling example of its use in social engineering. 

 

Dan emphasizes the importance of building strong relationships with board members to effectively communicate cybersecurity risks and foster a culture of awareness within organizations. He also highlights the necessity for cybersecurity professionals to continuously adapt and learn in order to stay ahead of emerging threats. 

 

Topics discussed:

 

• The growing threat of deepfakes in corporate environments and how they can be used for social engineering attacks against organizations.
• The importance of effectively communicating cybersecurity risks to board members and how to gain their trust and support.
• Strategies for fostering strong relationships with leadership to ensure cybersecurity is prioritized within the organization’s overall business strategy.
• The necessity for cybersecurity professionals to engage in ongoing education and training to keep pace with evolving threats and technologies.
• The need for robust verification methods in communications, particularly in light of the potential misuse of deepfake technology.
• Wisdom for aspiring CISOs, including the value of obtaining an MBA to enhance business communication skills and strategic thinking.
• The critical importance of rapid detection and response to security incidents, and how organizations can improve their response times.
• The role of threat intelligence in shaping security strategies and how it can help organizations stay ahead of potential attacks.
• The need for a culture of cybersecurity awareness within organizations is discussed, focusing on how to engage all employees in security practices.
• The importance of having a mid-level competency in various technologies to understand lateral movement and improve overall security posture.