ShieldX’s CISO Guide to Ransomware Prevention in the Data Center

Among the most dire consequences of a successful cyber exploit are ransomware attacks. Costs for dealing with ransomware average out to tens of thousands of dollars, with the price tag presently doubling every quarter. State and local governments—often with underfunded network infrastructures—find themselves less prepared to resist ransom demands and are paying an average of $338,700, according to ransomware consultancy Coveware.

These public sector attacks offer a window into the methods and risks of ransomware attacks, as these are often more openly covered in the media. There are, unfortunately, plenty of them to look at, with 53 attacks targeting state and local governments in 2018, according to a report from threat-intelligence firm Recorded Future. 2019 is tracking to be well above that figure.

Click here for the full guide

InterSystems Proven Scalability for Health and Care

InterSystems Proven Scalability for Health and Care

For large healthcare delivery systems, software scalability is critical. As organizations grow, they need data to flow seamlessly across their health IT systems to provide a unified care record, and for analytics that span the care continuum. However, many first-generation data-sharing initiatives fail to address fundamental technical challenges, including access, scalability, and performance.

Customers often come to us when searching for the right solution for their second-generation interoperability investment. In InterSystems HealthShare®, they find a proven and powerful foundation, with integration, information sharing, and analytics solutions that scale easily to handle their own success and thousands of concurrent users. Consider, for example:

Replatforming at Scale: Greater Houston Healthconnect

Houston has grown to become the third-largest city in the United States, renowned for its healthcare institutions — Memorial Hermann, MD Anderson Cancer Center, and Houston Methodist, to name a few. These institutions share their medical records through the Greater Houston Healthconnect.

Click here for the full report

How to Stay Motivated While Self-Isolating and Social Distancing

This article was contributed by Thelis Negron, Founder of MBX – The Mind and Body Experience.

How can you help yourself stay motivated while self-isolating? Here are a few helpful tips to keep you focused on staying healthy and positive:

We have entered unchartered territory. For most of us, staying completely confined to our homes without the ability to have physical contact with friends, let alone our own family members can be very distressful. Add to that the extra task of trying to maintain a normal life during this period where nothing is “normal” and everything we do has to be monitored to a certain degree. Life as we know it, at least for the foreseeable future, is completely derailed and if we don’t make a conscious effort to maintain some sort of control over it, it can be very easy to fall into unhealthy habits. How can you help yourself stay motivated while self-isolating? Here are a few helpful tips to keep you focused on staying healthy and positive:

  1. Set a routine

Now that we are self-isolating and are all working from home and/or staying in 24-7, it’s important that we create an environment that feels productive in order to avoid feeling negative and down. The best way to do this is by setting a routine. This is especially important for those with children who are used to having the daily school schedule and who really aren’t able to create a routine for themselves. However, as adults, creating a routine is equally helpful for us to avoid becoming depressed from the lack of structure in our own daily schedules. Nothing can be more daunting than waking up every day and having to figure out what to do with your time. Under normal circumstances after a long work week having nothing planned on a Saturday or Sunday morning can feel liberating. But on a daily basis, this can become a source of anxiety. I suggest creating a schedule around the staple daily activities: wake up time, meals, bedtime, etc. Maintaining the same schedule daily will not only limit the possibility of downtime, which can lead to emotional lows, it may also help the day go by quicker so you won’t have too much time to focus on the fact that you’re stuck at home.

  1. Make an appointment for your self-care 

Self-care can be very healing during this time of self-isolation, because the more you do for yourself the better you may feel! And self-care can look any way you need. It could be making time for your favorite show, time for a call with your good friend, or my personal favorite, time to work out! Working out during this period has helped me tremendously. It is a known fact that exercise releases the feel-good hormones in your brain called endorphins. Endorphins are chemicals produced by the body to relieve stress and one way to tap into them is through exercise. The best part is when it comes to releasing endorphins, it doesn’t have to be anything too intense—even moderate exercise can help the release of these natural body relaxants. Moreover, the most important key in this suggestion is to actually make time for your self-care, whatever it may be. Nestled in your daily schedule, make sure you make an appointment with yourself for your self-care so that the day doesn’t pass you by without it!  

  1. Make virtual appointments with “feel good friends”

A lot of people are stressing out about the current situation as we are surrounded by bad news all day every day. Although it’s important to stay informed, it is equally important to try and occupy your mind with thoughts that don’t involve the crisis. This is a good time to reach out to your “feel good friends.” We all know that someone in our lives—could be any loved one, friend or family member—that is just super positive. These are the people you should try to spend some virtual time with right now. Make note of pessimistic people in your life who truly find it difficult to distract themselves from the worry of what is happening around them and inadvertently bring you down with their personal anxiety. We all know the “life is terrible and there is nothing else to say,” people who no matter how much you try to make light of the situation, they just can’t seem to. This is the time to try to lessen your exposure to any negativity. I’m not suggesting you cut-off your “Negative Nancy” friends completely, but do try to reach out to the ones who are able to talk about something more positive these days. Yes, things aren’t great and right now there doesn’t seem to be a light at the end of the tunnel quite yet. However, life is continuing and we have to try to stay in good spirits as best we can so that we don’t compromise our immunes systems at such a critical time when we need them to be strong! While self-isolating, make an appointment to talk to your feel-good friends. If you are that person, try to lift the spirits of those in your life who have a hard time doing it for themselves. However, make sure you also take care of your own emotional health in the process!

This is a crazy and scary time, to say the least. For that reason, it is so important to make a conscious effort to stay healthy and positive. Try to incorporate good thoughts, good food, and good energy into your life daily and before you know it, life will be back to normal!

Want more health and fitness advice? Click here 

Exponea’s Scott McNabb Talks CDP on #MillenniumLive

Scott McNabb, SVP and General Manager of the Americas at Exponea, sat down with us for an episode of #MillenniumLive at the Digital Marketing and Digital Retail Transformation Assembly earlier this month. Scott discusses the challenges marketers face with changing consumer behavior and disjointed technology stacks, and how Exponea uses AI to make sense of data and engage the audience from a multichannel perspective.

powered by Sounder

Watch the video interview here

Listen to the podcast episode here

About Scott McNabb

Scott is a prolific leader and marketing technology evangelist who is passionate about guiding companies towards extraordinary revenue performance. With over 20 years designing and executing revenue generation models for Marketing and Sales leaders worldwide, Scott and his teams have guided countless Fortune-500 companies toward well-documented success. Scott’s rabid focus is driving business value extraction thru increasing customer intimacy thus increasing revenues.

Marketing Innovation Starts Hereretail-transformation-conference-summit

Digital Transformation involves ongoing exploration by today’s leaders, and our best advice is to not trek the journey alone. Our Digital Marketing Transformation Assembly coming this August in Denver is set to be an inspiring event featuring some of retail’s top C-Suite executives.

We know what you’re thinking…

This isn’t Your Run-of-the-Mill Conference or Summit.

Our Founders, like many C-Suite executives today, became disillusioned by the slew of retail conferences, summits and events on the market today that promised “world class networking” opportunities with leading industry decision-makers. In reality, they found that these events had antiquated discussion topics presented in an impersonal format, and quite frankly, it seemed like just about anyone could attend the event.

What Makes a Millennium Assembly Different? 

We’re dedicated to creating the greatest think tank of today’s executives from some of the most prominent companies today. Our invite-only events consist of 55 carefully selected leaders holding C-Suite, EVP, and SVP positions from Fortune 500 companies.

These attendees are provided the opportunity to intimately connect in workshops & roundtables with fewer than 25 people, with interactive networking opportunities at our cocktail hour and Gala Keynote Dinner and personalized 1:1 meetings. This is an experience like no other, all taking place at some of the most beautiful hotel and resort venues in the country.

We’re serious about executive education. Our Assembly Agendas are data-driven and curated from our industry-expert Advisory Board, a group of 26 industry movers and shakers with a proven record of digitally transforming organizations from the ground-up. The prevailing topics and trends discussed at this assembly will cover the most poignant challenges affecting leaders today.

The Millennium Alliance’s goal is to change the way leaders look at executive education, and you won’t find this level of content, discussion, and networking anywhere else. We’re on the journey to digitally transform the retail industry with you.

Join the Assembly

Want to find out if you qualify? Millennium Membership >>

Are you a Solution Provider interested in Sponsorship Opportunities? Learn More >>

 

CISO’s Guide to ShieldX and Zero Trust Networking

With the onset of cloud computing, perimeters dissolved due to fragmented data centers. Suddenly, data and applications went from nicely confined rooms with a handful of doors and windows to virtualized environments with no perimeters. It was back to the Wild West, which meant security and compliance were quickly downgraded—and the increased interest in Zero Trust for network security. In fact, NIST has released Draft Special Publication (SP) 800-207, Zero Trust Architecture. Forrester’s report, Zero Trust For Compliance (July 15, 2019), details control mapping for Zero Trust against 12 industry and government compliance mandates.

Historically, security was attempted primarily by fortifying the data center perimeter. That architecture is no longer effective, as there is an incongruity between the physical data center boundary and virtual perimeters. Those new perimeters can take up any size and shape and change at cloud speeds, making it impossible for traditional security to follow. Additionally, the security controls offered by cloud vendors are weaker than traditional options and are often no match against attacks hindering confidence and compliance in cloud adoption. A comprehensive Zero Trust networking architecture is required.

What is Zero Trust Networking?

Creating a Zero Trust networking architecture means creating a least privileged environment. This requires an understanding of:

•N-tier application structure

•Tier boundaries

•Tier isolation

•Microsegmentation

•User, process and workload identity

Click here for the full guide 

#MillenniumLive Talks DTC, Customer Loyalty & Attribution with Mark Friedman

Mark Friedman’s vanguard insights hail from his experience with a number of top retail companies, like Steve Madden and Brooks Brothers. He is now the President of Details Interactive and recently launched his own podcast, The Marketing Playbook Podcast.

In this week’s episode, Mark shares his wisdom on a number of topics, including the shakeout DTC brands are facing, the best ways to approach customer loyalty through experience-based initiatives and one of the greatest challenges for today’s marketers: attribution.

powered by Sounder

Watch the video interview here

Listen to the podcast episode here

More About Mark Friedman

Mark has spent more than 25+ years in the direct to consumer business. He spent his early years focused on finance and ultimately moved into catalog marketing with a start-up business. He has led the marketing initiatives for a number of catalog and later, e-commerce focused brands including Brooks Brothers, Full Beauty Brands (formerly Brylane/Redcats), Amerimark and Steve Madden. At Madden, Mark was President of E-commerce. He is highly analytical yet creative, and he has driven growth through customer acquisition and retention programs and has been the architect of a number of loyalty and private label credit card programs. As an e-commerce leader; Mark speaks often at industry events. Mark is a strong leader and he has spent many years mentoring early stage companies. Most recently as a Mentor through XRC Labs, he has worked with 3 companies helping to shape their go to market strategies.

Retail Innovation Starts Hereretail-transformation-conference-summit

Digital Transformation involves ongoing exploration by today’s leaders, and our best advice is to not trek the journey alone. Our Transformational Retail Assembly coming this August in Denver is set to be an inspiring event featuring some of retail’s top C-Suite executives.

We know what you’re thinking…

This isn’t Your Run-of-the-Mill Conference or Summit.

Our Founders, like many C-Suite executives today, became disillusioned by the slew of retail conferences, summits and events on the market today that promised “world class networking” opportunities with leading industry decision-makers. In reality, they found that these events had antiquated discussion topics presented in an impersonal format, and quite frankly, it seemed like just about anyone could attend the event.

What Makes a Millennium Assembly Different? 

We’re dedicated to creating the greatest think tank of today’s executives from some of the most prominent companies today. Our invite-only events consist of 55 carefully selected leaders holding C-Suite, EVP, and SVP positions from Fortune 500 companies.

These attendees are provided the opportunity to intimately connect in workshops & roundtables with fewer than 25 people, with interactive networking opportunities at our cocktail hour and Gala Keynote Dinner and personalized 1:1 meetings. This is an experience like no other, all taking place at some of the most beautiful hotel and resort venues in the country.

We’re serious about executive education. Our Assembly Agendas are data-driven and curated from our industry-expert Advisory Board, a group of 26 industry movers and shakers with a proven record of digitally transforming organizations from the ground-up. The prevailing topics and trends discussed at this assembly will cover the most poignant challenges affecting leaders today.

The Millennium Alliance’s goal is to change the way leaders look at executive education, and you won’t find this level of content, discussion, and networking anywhere else. We’re on the journey to digitally transform the retail industry with you.

Join the Assembly

Want to find out if you qualify? Millennium Membership >>

Are you a Solution Provider interested in Sponsorship Opportunities? Learn More >>

How to Value a Company by Analyzing Its Customers

As originally published by our Marketing Thought Leader, Daniel McCarthy & Peter Fader on HBR.com.


In the weeks leading up to the initial public offering of apparel retailer Revolve Group, in June 2019, investors struggled to come up with a fair valuation. Several recent IPOs—most notably those of the ride-hailing firms Uber and Lyft—had been disappointing. Revolve had delayed its IPO for months because of a downturn in the stock market. Despite the headwinds, its IPO was priced at $1.2 billion—and it exploded by an additional 89% on its first day of trading, making it one of the best first-day IPO performances of 2019. The spike brought the company’s valuation to roughly 4.5 times its revenue over the previous 12 months—five times the multiple of its apparel-retailing peers and more akin to that of a technology company. What happened, and why did investors originally fail to see just how strong a firm Revolve was?

Revolve’s premium valuation was not a fluke. It stemmed from the firm’s strong underlying fundamentals, which were not fully appreciated by the underwriters who set the IPO price. This strength was less about top-line revenue growth and more about strong customer-unit economics: Simply put, Revolve not only acquired its customers profitably but retained them for many years, and that meant its longer-term profit potential was larger than its revenue growth to date had implied.

Revolve’s IPO success illustrates the movement toward customer-driven investment methodologies. Using customer metrics to assess a firm’s underlying value, a process our research has popularized, is called customer-based corporate valuation (CBCV). This approach is driving a meaningful shift away from the common but dangerous mindset of “growth at all costs” toward revenue durability and unit economics—and bringing a much higher degree of precision, accountability, and diagnostic value to the new loyalty economy.

In this article, we explain how executives and investors can use the principles of CBCV to better understand and measure the value of a firm. The methodology works whether the company features a predictable, subscription-driven revenue stream (think of Netflix and Verizon) or a base of active customers who place discretionary orders every so often (think of Uber and Walmart). We also discuss how companies can benefit from providing investors with more of the right kinds of customer data—and how investors can avoid being fooled by vanity metrics that appear to be useful indicators of customer behavior but aren’t as meaningful as they might think.

A More Precise Way to Forecast Revenue

The premise behind CBCV is simple. Most traditional financial-valuation methods require quarterly financial projections, most notably of revenue. Recognizing that every dollar of revenue comes from a customer who makes a purchase, CBCV exploits basic accounting principles to make revenue projections from the bottom up instead of from the top down. Although this may seem like a radical departure from traditional frameworks, that’s not the case: CBCV simply brings more focus to how individual customer behavior drives the top line.

What do we need to implement CBCV? In addition to the usual financial statement data, two things are required: a model for customer behavior (what we call the customer-base model), and customer data that we feed into it. The model consists of four interlocking submodels governing how each customer of a firm will behave. They are:

  1. the customer acquisition model, which forecasts the inflow of new customers
  2. the customer retention model, which forecasts how long customers will remain active
  3. the purchase model, which forecasts how frequently customers will transact with a firm
  4. the basket-size model, which forecasts how much customers spend per purchase

Bringing these models together enables us to understand the critical behaviors of every customer at a firm—who will be acquired when, how much they’ll spend over time, and so on. Summing up all the projected spends across customers gives us our quarterly revenue forecasts. Together, these models can produce much more precise estimates of future revenues streams—and from that, one can make much better estimates of what a company is really worth.

This basic model is universal, no matter what kind of business a company is in. Exactly how it is specified, however, depends on the company’s business model—in particular, on whether the company is subscription-based or not. At a subscription-based business, such as a gym or a telecommunications firm, managers generally know how much customers will spend each month, and they are able to directly observe when customers churn out, because they literally cancel their contracts and close their accounts. This simplifies how the retention and purchasing submodels are built.

Most companies, however, are characterized by discretionary (that is, nonsubscription) purchasing and unobservable customer churn. If you have an Amazon account but decide never to buy from the company again, for example, it’s difficult for anyone inside or outside Amazon to immediately recognize that. Marketers call this latent attrition. Accounting for it requires more-complicated submodels, but marketers have developed methods for predicting it extremely well.

Peeking Inside the Black Box

Although this methodology may seem daunting, it’s relatively simple to get going, and it can be refined and extended as appropriate for particular business contexts.

Let’s peek inside the black box through an example. Imagine that you’re the founder of a young, fast-growing, subscription-based meal-kit company. In its first four months of operation, your company generated $1,000, $2,500, $4,500, and $7,000 in total revenues respectively. You would like to understand what this means for future revenues and the overall viability of your business. As a start, you want to forecast revenue in month five.

Let’s suppose that active customers pay a flat fee of $100 per month for meal kits delivered over the course of the month, and that the company acquired 10, 20, 30, and 40 customers, respectively, in its first four months of operation (100 in total). Half the acquired customers churned out in their first month; all customers who did not churn out in the first month have remained.

The first step in forecasting month five revenue is to figure out how much revenue will come from retained customers. Of the 100 customers acquired over the first four months, half, or 50, will still be with the company in month five if historical retention trends persist. Thus, the portion of month five revenue from retained customers is $5,000 (50 x $100). The next step is to forecast how much revenue will come from new customers. Assuming that acquisition trends continue, you can expect an additional 50 customers, representing $5,000 of revenue. By adding up the two forecasts, you arrive at a total monthly revenue of $10,000.

Using the CBCV approach, revenue numbers no longer exist in a vacuum. Instead, they are a direct function of a small set of behavioral drivers—in this example, total customers acquired, retention dynamics, and average revenue per user (ARPU). This framework makes revenue forecasting easier and serves as a diagnostic, helping managers and investors understand where the value creation is coming from (and what questions to ask when results are out of line with expectations).

Of course, few companies will have such simple models and neat patterns as our meal-kit example. Our purpose here is to outline the general mechanics of the approach, as extensions of it follow naturally. Suppose, for example, that your firm has tiered pricing (it also offers a second plan that delivers twice as many meals a month for $189). In that case, you would need to account for variable ARPU from period to period. If the firm allows customers to skip deliveries or make discretionary purchases, you would need to track order frequency and average spend per order. If the firm pivots to sell meals à la carte instead of on a subscription basis, you’ll need to use a model that predicts how often customers will place orders. These extensions add complexity to the model, but the basic process to incorporate them would be the same as in the example above. If you want to extend the time horizon beyond month five, you can repeat the calculation for multiple months. That gives you a long-term revenue forecast, which is vital for corporate valuation.

For an in-depth discussion of the CBCV methodology in complex scenarios, see our academic papers “Valuing Subscription-Based Businesses Using Publicly Disclosed Customer Data” (Journal of Marketing, October 2016) and “Customer-Based Corporate Valuation for Publicly Traded Non-Contractual Firms” (Journal of Marketing Research, March 2018).

Looking at Customers from Inside and Outside

The richness of the insights that can be derived from CBCV depend on how much access the person performing the analysis has to internal company data. A corporate executive would have full visibility of all customer data. A private equity investor assessing an acquisition target would typically have access to transactional and CRM data. For subscription firms, that would include the length of contracts, periodic payments, and observable churn; for nonsubscription firms, it would include the timing and size of each individual purchase. Access to other behavioral data, demographics, marketing touchpoints, service interactions, and the like would further enrich the CBCV analysis.

For those on the outside looking in—hedge funds, Wall Street analysts, regulators, and others—detailed customer data might be impossible to obtain on a regular basis. They may, however, have access to the firm’s customer cohort chart, or C3, which tracks revenue by acquisition cohort over time and shows how total customer spending changes as each cohort ages. (For an example, see the exhibit “C3: A New Tool for Corporate Valuation.”) Many large, reputable firms (both subscription and nonsubscription) have begun to disclose their C3, among them Slack Technologies, Dropbox, Lyft, and luxury marketplaces the RealReal and Farfetch. A firm’s C3, along with the number of active customers and the total number of orders, is sufficient to give investors a good understanding of customer behavior.

If a firm can’t or won’t release its C3, investors should press it to reveal four key metrics: the number of active customers (in total and the percentage from tenured customers, or customers who have been with the firm for over 12 months); gross acquired customers over the most recent period; revenue (total and percentage from tenured customers); and the number of orders (total and percentage from tenured customers).

While we would strongly encourage firms to disclose more, having three or four years’ worth of these disclosures (from past filings) is enough to run a CBCV model and assess the overall health of a company’s customer base, albeit with greater uncertainty about future revenues.

Trending Toward Transparency

Few companies currently provide all the data outsiders need to perform CBCV, for a variety of reasons. First, disclosure of customer metrics is voluntary, and companies feel little to no pressure to make them available. Second, there is little consensus about which customer metrics are the most informative and how those metrics should be calculated and reported. And finally, policy makers and regulators have been largely silent about these issues, leaving disclosure to companies’ discretion.

Unfortunately, executives often have a “less is more” mentality regarding disclosure. They fear that additional disclosure, however aggregated the numbers may be, could put them at a competitive disadvantage or open them up to potential litigation or regulatory scrutiny. Successful firms worry about how investors will react if the metrics they’re disclosing start going in the wrong direction. And customer-level forecasting often remains siloed in the marketing department; managers in finance and related functions are unaccustomed to incorporating customer behaviors in their revenue forecasts and are more comfortable using traditional methods.

In the absence of investor pressure and regulatory standards, firms can arbitrarily choose which metrics to disclose, generally selecting those that paint an overly rosy picture for the investment community. The metrics are often defined improperly, based on faulty assumptions, or framed incorrectly.

Think about the story your customer metrics would tell if disclosure were required.

Consider Peloton, which sells high-end home-exercise equipment and monthly subscriptions to streaming-video fitness classes. When it filed its pre-IPO S-1, in August 2019, it chose to disclose its customer lifetime value (CLV) per subscriber, boasting a CLV of $3,593 in its most recent fiscal year. To its credit, Peloton also disclosed the underlying formula it used to compute its CLV, but that formula left much to be desired. The most glaring problem was that it did not account for the time value of money, and instead simply added more than 13 years’ worth of future cash flows without discounting them. Applying even a modest discount rate would slash its CLV by more than 50%—a drop with significant implications for the health of the customer base. As more firms voluntarily disclose customer metrics, analysts must be vigilant about vetting data that may be misleading or is mostly window dressing.

Although Peloton’s metrics are far from perfect, they nevertheless represent an encouraging shift toward transparency around customers that will be good for shareholders, companies, and customers. Shareholders will increasingly rely on customer data to evaluate potential investments as more purchases are made online and traditional brick-and-mortar metrics, such as same-store sales, decline in relevance. Executives can use customer data to build the case for investing in activities that will generate long-term value for the firm and to communicate to shareholders the impact of those investments on CLV and other long-term metrics. Customers will be treated as strategic assets whose value should be cultivated over the long term. This mindset will be a welcome change from the status quo, in which shareholders, lacking the information needed to assess long-term customer profitability, compensate by pushing firms to hit short-term performance measures.

Until the CBCV revolution fully takes hold, what does all this mean for you? If you are an investor, don’t ignore the customer-related metrics that may be tucked away in financial reports; actively seek them out. If the data you need isn’t disclosed, demand it, or find alternative sources that can serve as effective proxies. Focusing on unit economics will almost certainly reveal opportunities you can exploit.

If you’re an executive and you aren’t currently disclosing your customer metrics, start thinking about the story they would tell if disclosure were required. If you would not be proud of your metrics as they stand, this is your golden opportunity to refocus on and improve the health of your customer base in the dark. It may not be long before market participants demand sunlight.

Daniel McCarthy is an assistant professor of marketing at Emory University’s Goizueta Business School and a co-founder of Theta Equity Partners, a customer-based corporate valuation solutions provider.

Peter Fader is the Frances and Pei-Yuan Chia Professor of Marketing at the Wharton School of the University of Pennsylvania, a co-author of The Customer Centricity Playbook, and a co-founder of Theta Equity Partners.

Marketer’s Checklist for Navigating COVID-19

Many brands are facing the reality of messaging that was ill-timed or even insensitive. The COVID-19 pandemic has already had a tremendous impact on consumer behavior, and brands continue to face tough decisions on how to respond. All brands are affected, one way or another, and all marketers should take steps to ensure that their marketing strategy is in line with consumer needs during this crisis. In times as turbulent as these, it is important to act with safety as the number one priority and to keep lines of communication open.

With that in mind, Exponea has created the following checklist and resources for consideration in your marketing strategy over the next few weeks.

Marketer’s checklist:

  • Send an email reassuring your customers and let them know you and your business are concerned about them, also provide some real resources
  • Review your emails that relate to shipping: change language like “free shipping, expedited shipping” to “thank you for your patience and your business, it might take some time to get to you”
  • Check your automated templates, make sure they are written in a way that takes current circumstances into account (don’t send a “we hope you’re looking forward to your vacation” when it’s likely they’ve had to cancel)
  • Pause some of your automations, particularly the ones that aren’t adding value to the current situation in your market
  • Use frequency capping to limit emails to one per day in Exponea, your automations in a normal week could be seen as positive but during time of consumer concern it could have a negative view (unless you’re sending API triggered communications)

Click here for the full checklist

Thinking Like the Enemy: Banks Conduct “Self-Hacks” to Strengthen Defense Against Cyberattacks

Sometimes you have to think like the enemy in order to stay one step ahead of them, at least according to the American Bankers Association. As cybersecurity experts strengthen their defense against increasing security breaches, cybercriminals continue to improve their own capabilities. The solution? “Self-hack” their own systems to determine key vulnerabilities in order to find a way to eliminate them. 

“I could compare it to an arms race,” says Nicholas Antill, Senior Vice President and Senior Security Manager at PNC Bank. Antill draws this comparison based on the constant skill and technology improvement on both ends, which results in a continuous power struggle between hacker groups and cybersecurity teams. Many of the 300 banks hacked in December of 2019 by the Russia-based hacker group Evil Corp are conducting their own hacks to prevent future breaches. Many are relying on in-house teams and contracting third-party vendors to act like hackers and test their systems for weak points. Some, however, are taking more extreme measures an enlisting real, non-criminal hacker groups called “white hat hackers” for a more realistic simulation. Regardless of the approach, each self-hack method aims to achieve the same thing: to get inside the mind of a cybercriminal.

Another factor to consider, in addition to who will be conducting the test, is which kind of test will be conducted. There are several types of testing, each with different factors used to produce different results.

Penetration Testing

Penetration testing, otherwise known as “pentesting” is the most common type of self-hack. Pentesting involves hacking an individual network or application to detect any vulnerabilities not covered by other security measures. Caroline Wong, chief strategy officer at the security testing firm Cobalt.io recommends starting with this method to find where weaknesses lie, such as in mobile apps or cloud infrastructure. 

Under the umbrella of penetration testing, there are three different types to consider.

Black-Box Testing

In a black-box test, the hacker has no knowledge of the system it is attacking. This approach more realistically simulates an actual attack, as the average malicious hacker would not have inside knowledge of the system’s operations.

White-Box Testing

White-box testing is conducted by someone with a comprehensive understanding of the system. White-box testing is very thorough because the tester is familiar with the nuances of the system’s security, and therefore knows where to look for vulnerabilities.

Gray-Box Testing

Gray-box testing is conducted by someone who has some understanding of the system’s inner workings, but not extensive knowledge. This method combines the benefits of black-box and white-box testing and may emulate a hacker who may have been able to obtain some knowledge of the system prior to the attack.

Red Team Testing

Red team testing is a more formal, experiment-like, test in which the “red team” acts like actual hackers and launches an attack on the company’s “blue team”. Red-team tests are conducted on a wider scale and often use specific tactics used by known security threats. The target and objective of a red team test are specific and narrowly focused compared to those of a penetrative test. Wong recommends starting with pentesting for a more broad overview of the security system and a general understanding of where vulnerabilities lie. Red team testing is typically conducted by companies with a higher security level that are looking to fine-tune specific weaknesses. Red team testing aims to accurately simulate a real attack, so they typically last two to six months. The tests target both software and human-related weaknesses and threats. 

The benefit of carrying out a “self-hack” rather than simply using scanning software to detect vulnerabilities is the human element involved. “If we were bad guys, you know, what would we use to get in?”, says Aaron Shilts, president, and COO of vulnerability assessment firm NetSPI. Once weaknesses are detected, it’s up to leadership to reevaluate security across all channels and personnel. 

As more and more companies around the world are hiring hackers to test their defenses, questions of standardization are raised. The European Central Bank has released the European Framework for Threat Intelligence-based Ethical Teaming, or TIBER-EU, which lays out standardized practices for institutions that execute self-hacks. Tyler Leet, Director of Risk, Information Security, and Compliance Services at core banking and cybersecurity provider CSI, warns to only use these tests to “actively look to learn from the results” and to avoid pointing blame at employees. 

When done right, self-hacks prove to be very helpful for banks and financial institutions looking to find gaps in their network security. The best way to beat hackers and their rapidly improving capabilities is to stay one step ahead of them, which means thinking like them and constantly hunting for weaknesses they could exploit. 

Cybersecurity Innovation Starts HereCISO WEST AUGUST

Digital Transformation involves ongoing exploration by today’s leaders, and our best advice is to not trek the journey alone. Our Transformational CISO West Assembly coming this August in Las Vegas is set to be an inspiring event featuring some of cybersecurity’s top C-Suite executives.

We know what you’re thinking…

This isn’t Your Run-of-the-Mill Conference or Summit.

Our Founders, like many C-Suite executives today, became disillusioned by the slew of retail conferences, summits and events on the market today that promised “world class networking” opportunities with leading industry decision-makers. In reality, they found that these events had antiquated discussion topics presented in an impersonal format, and quite frankly, it seemed like just about anyone could attend the event.

What Makes a Millennium Assembly Different? 

We’re dedicated to creating the greatest think tank of today’s executives from some of the most prominent companies today. Our invite-only events consist of 55 carefully selected leaders holding C-Suite, EVP, and SVP positions from Fortune 500 companies.

These attendees are provided the opportunity to intimately connect in workshops & roundtables with fewer than 25 people, with interactive networking opportunities at our cocktail hour and Gala Keynote Dinner and personalized 1:1 meetings. This is an experience like no other, all taking place at some of the most beautiful hotel and resort venues in the country.

We’re serious about executive education. Our Assembly Agendas are data-driven and curated from our industry-expert Advisory Board, a group of 26 industry movers and shakers with a proven record of digitally transforming organizations from the ground-up. The prevailing topics and trends discussed at this assembly will cover the most poignant challenges affecting leaders today.

The Millennium Alliance’s goal is to change the way leaders look at executive education, and you won’t find this level of content, discussion, and networking anywhere else. We’re on the journey to digitally transform the marketing industry with you.

Join the Assembly

Want to find out if you qualify? Millennium Membership >>

Are you a Solution Provider interested in Sponsorship Opportunities? Learn More >>

COVID-19’s Impact on eCommerce: Get the Numbers Here

As originally published by WITHIN.

WITHIN is monitoring the effects of COVID-19 on ecommerce. Using data from a sampling of clients, we are tracking year-over-year trends in ecommerce revenue, ad spend, and conversion rate relative to the pre-COVID benchmark period.

For insight into how to best weather the storm, check out our new study, “Digital strategies to get your brand through Coronavirus.”

Tuesday, March 17, 2020

The effects of the COVID-19 outbreak in the US are growing, with 4,226 documented cases as of this writing. San Francisco has ordered a shelter-in-place policy while New York City ponders doing the same. Meanwhile, for now, retail metrics seem to be leveling off.

FASHION

  • From its pre-COVID trend, fashion ecommerce revenue has fallen -61.68%, up a bit from yesterday’s -63%.
  • Conversion rates are down by -34%, higher than yesterday’s -46%

OMNICHANNEL

  • Revenue has fallen -63.13%
  • Conversion rates continued to fall, now at -16.3%.

LUXURY

  • Revenue saw a little bump, up to -31% compared to yesterday’s -37.87%
  • Conversion rates fell to 0.40% from yesterday’s +25.4%.

PURE-PLAY ECOMMERCE

  • Revenue made a slight rebound from -46.43% to today’s -29%.
  • Conversion rates are likewise slightly up at -26.5% compared to yesterday’s –32.63%.

SUBSCRIPTION & AT-HOME CONVENIENCE

  • Revenue has risen by +204.3%.
  • Conversion rates are up by +159.22%.

Monday, March 16, 2020

As of this writing, the number of reported COVID-19 cases has grown by 114% since yesterday. Across the country, stores, gyms, restaurants, bars, venues, movie theaters, and schools are closing their doors indefinitely. The retail world is likewise not faring well.

FASHION

  • From its pre-COVID trend, fashion ecommerce revenue has fallen -63%.
  • Conversion rates are down by -34%, higher than yesterday’s -46%.

OMNICHANNEL

  • Revenue has fallen -57.3%.
  • Conversion rates are down by -7.44%.

LUXURY

  • Revenue has fallen -37.87%.
  • Conversion rates are up by +25.4%, likely because they’ve pulled back ad spend which has decreased traffic. Repeat buyers and lack of new site traffic make the CvR appear higher.

PURE-PLAY ECOMMERCE

  • Revenue has fallen -46.43% from its pre-COVID trend.
  • Conversion rates are down by –32.63%.

SUBSCRIPTION & AT-HOME CONVENIENCE

  • Revenue has risen by +204.88%.
  • Conversion rates are up by an amazing +119.36%.

Friday, March 13, 2020

COVID-19 continues to spread, with 1,629 confirmed cases across the US. The economic impact is being felt across retail verticals too.
  • The fashion category has been hit hard, with revenue -40.96% from where it was trending around this time in January (the baseline benchmark we’re using).
  • Pure-play ecommerce growth has slowed from our last update from -14.57% on 03/10 to -35.30 from its growth trend.
  • Omnichannel has declined to -41.42% from trending revenue growth.
  • Subscription brands continue to grow at an incredible pace, at +127.19% from its baseline trending growth this time two months ago.
  • Luxury goods continue to drop, now at -35.99%.

Go here for WITHIN’s latest updates on COVID-19’s impact on eCommerce.