Ice Miller senior cybersecurity advisor Chetrice Romero was featured in CIO Dive article, “What CIOs should know — and do — as Iran conflict unfolds.”

The article included:

CIOs need to know where cloud providers are keeping their data. While a cloud might give the idea that data “…is ones and zeros in the air, it all is still somewhere, and still on physical servers,” said Chetrice Romero, senior cybersecurity advisor at Ice Miller.

If a CIO doesn’t know where that data is, they need to find out, she said, and reconsider their cloud services if their data is being kept in China or Russia. Other questions to ask, Romero said, include what measures are in place to protect servers, how they are backed up and how often.

Making sure cybersecurity basics are covered is especially critical, said Romero, because Iranian hackers are especially good at breaking into systems by picking off so-called low hanging fruit, like exploiting “unpatched systems or default passwords, especially for operational technology systems.”

Attacks from Iranian actors “are not always very sophisticated in the nature of their attacks,” Romero said. “But a lot of times they’re counting on people’s defenses being inconsistent.”

Click here to read the full article.