“To put it simple, I’m a logical security guard. You traverse the internet and my job is to make sure that when you do it, you’re secure,” Aboitiz Equity Ventures’ (AEV) Chief Information Security Officer (CISO) Charmaine Valmonte tells Aboitiz Eyes.
Charm’s remarkable achievements in the cybersecurity field have garnered recognition here and abroad. Recently, she received the prestigious award for Cyber Woman of the Year at the PhilSec Awards 2023, an annual event that recognizes outstanding talents that are at the forefront of innovation and thought leadership in the industry.
“The significance of winning this award is a testament of the [AEV] CIS Team’s successes and improvements to the Cyber Program by successfully deploying an Identity Governance capability that supports the initiatives toward controlling and managing access and privileges to our systems. The use of technology to improve and operationalize proper Identity and Access Management capabilities are key requirements to enabling ‘work from anywhere securely’ directly contributes to our journey of becoming a techglomerate,” she shared.
To achieve a techglomerate future, embracing security as a vital enabler becomes paramount. Charm emphasizes the crucial role of security in paving the way towards achieving this goal, highlighting its significance and the need to prioritize it as a strategic driver for future innovation and growth.
A key message we emphasize in 2023 is that security is an enabler of technology. Just like how IT empowers businesses to innovate, security plays an equally crucial role. When discussing IT, we must consider security in the same context to ensure alignment and effective functioning of the organization by 2025.
In 2020, we initiated the Identity Governance project that laid the groundwork in transforming from a perimeter based strategy toward a perimeter-less security strategy following the Zero Trust Model or methodology. However, transitioning from a non-existent ad hoc process to a technology-driven approach presented challenges, especially with seamlessly integrating processes into the system. The complexity was further amplified by the remote adaptation required during the pandemic. I’m very proud that addressing these challenges was something that the team does really well.
The CIS and IT Teams across the Group implemented the Endpoint Detection and Response (EDR) capability across 6K users in the midst of the pandemic. This EDR acts as that dedicated security guard for endpoints like laptops and servers. Through the team’s efforts, we were able to successfully implement this solution amidst the resource and remote capability challenges.
SECURING A TECHGLOMERATE FUTURE
To prepare for our techglomerate future, it’s crucial to consider security solutions that align with the organization’s desired innovations. For instance, if the organization plans to venture into smart cities, we proactively focus on securing that specific environment. This approach involves gathering information, pre-planning tools, and implementing measures in advance to safeguard the desired innovations. Our goal is to address multiple considerations.
In the case of the Identity Scape project, we were actively involved in the discussions from the beginning, ensuring a smooth and secure implementation.
I always compare this mindset to visiting crowded and dangerous place. If you visit a crowded place like that of Baclaran or Quiapo. Before you arrive or step out of the car, you instinctively secure your wallet and belongings? Security becomes automatic. Similarly, we aim for the organization to prioritize security when embarking on any venture or innovation. The mindset becomes: “Before proceeding, let’s prioritize our security.” It’s a culture change. We always make sure that we look at it from that lens also. That’s how we’re preparing for GT 2025.
“Work from anywhere securely”—that’s our tagline. It’s our vision to provide secure work environments, whether our teams are operating in the office or remotely from home. With us, our A-People can be confident that their security is always a top priority.
