Page 253 - Cyber Defense eMagazine RSAC Special Edition 2025

managing risk, organizations should follow a multi-step process. This includes identifying risk,
assessing risk based on the potential impact, prioritizing risk and then monitoring to ensure
defenses are working as intended.
3. Best Practice Processes. A workplace culture built around security-first processes is an
essential part of defending against deepfakes. This is where best practice comes in: employees
should always call unknown numbers back using trusted contact information and multi-factor
authentication (MFA) should be deployed where possible to avoid unauthorized access.
4. Phishing Simulation. Deepfakes make business email compromise (BEC) attacks even more
dangerous through realistic personalized messages. As threat tactics advance, traditional
phishing simulations won’t cut it anymore. Instead, organizations need exercises that match up
to real-world deepfake fraud. This includes realistic simulated attacks that may impersonate
executives within their own organization.

Dedicated Defenses Against Deepfakes

There is no silver bullet to mitigate deepfakes. At the end of the day, the key to defending against this
rising risk lies not in any one tool or technique, but in ensuring that your security fundamentals are rock
solid.

Now is the time to take control of your security outcomes. By leveraging a trusted cybersecurity expert
who provides deep expertise, organizations can proactively prepare for what’s to come, rather than
reacting to attacks once it’s already too late.

About the Author

Matthew Martin is the founder and CEO of Two Candlesticks and an
international leader in cybersecurity, risk, and technology. Matt is a trusted
security executive, international speaker, and board advisor for venture
studios, private equity, and various startups with a focus on supporting
overlooked markets and regions.

With over 25 years of experience in the cybersecurity industry, Matt has
led and implemented security organizations at Fortune 100 financial
services companies and currently provides high-level consultancy to
companies within diverse industries around the world. He has a passion
for serving the underserved in cybersecurity to create positive impacts for
organizations, end users, and society.

Matthew can be reached online at MatthewMartin@two-candlesticks.com,
https://www.linkedin.com/in/mattmartin/ and at our company website https://www.two-candlesticks.com/

253