The management of cablex appoints Domenik Imhof as Chief Information Security Officer (CISO) as of April 1, 2021. The position has been created in order to implement and supervise the requirements for operational information and data security, which have been increasing heavily over the last few years. Domenik Imhof reports to the Chief Information Officer, Sascha Spasovski.
Domenik Imhof has been employed at cablex since July 1, 2017 as ICT project manager and is currently still involved in the DynaFit project. In this project, we are implementing the new SAP standard solution S/4HANA at cablex. In his new role as CISO, Domenik Imhof will deal with all the security-relevant issues and tasks in the area of Information and Communication Technology (ICT) and data protection. This should ensure that in future, we will always be one step ahead with regard to new threats and vulnerabilities.
But let’s allow Domenik Imhof to speak for himself. We asked him about his new role at cablex.
What are your main tasks as Chief Information Security Officer?
Put in simple terms, my main activity will be to merge and develop the tasks performed at various places in the company with regard to ICT security and data governance.
Which topics will you prioritise in your new role?
We’re fortunate to have a good starting point at cablex. I can therefore start to consolidate the existing ICT security and data governance topics, ensure that they are implemented and derive further steps for improvement from this.
Where do you see the biggest threats in information security for cablex?
ICT security and usability are sometimes in a competing relationship with one another. The key here is to further enlighten the users at cablex about the reasons and necessity for security and to motivate them to practice ICT security. The biggest potential vulnerability is the human factor.
An increasing number of cloud solutions are being used. Are these solutions secure?
Cloud solutions are not insecure per se. Whether the applications are stored in a cloud or in a traditional computer centre is not the main criterion. What is more important is that the selected provider has appropriate ICT security expertise and is trustworthy.
How can each one of us at cablex contribute to a greater degree of information security?
There are many little things that we can do: don’t use shadow IT, don’t click on links or attachments in suspicious mails and choose strong passwords, to name just three options.
Many thanks, Domenik, for the interesting insights into your activities. We know now that information and data security cannot be ensured by individual persons, but require the vigilance and commitment of all employees at cablex.
We wish Domenik Imhof a pleasant start and every success in his new role at cablex.