Cybercrime: Bain Expert Offers 3 Tips to Thwart Attacks

A woman and man look on a row of computer screens
Listen

When it comes to preventing cyberattacks, companies are operating under a set of outdated notions, says Mark Sutton MBA’09, senior vice president and chief information security officer for Bain Capital.

Companies often treat cyberattacks as purely a “tech” problem, to be solved in an IT back office, he says, when really it needs to be tackled in the boardroom by the leaders making senior business-risk decisions.

Mark Sutton, senior VP and chief information security officer at Bain Capital
Mark Sutton MBA’09, senior vice president and chief information security officer at Bain Capital

“Cybercrime isn’t a criminal endeavor; it’s a business,” Sutton asserts. “To protect your company, you have to understand who may want to target you, how they may compromise your network and what your most critical and sensitive digital assets are.”

It seems almost quaint now to recall a once-pervasive image of cybercriminals “as geeks in their parents’ basement with no real friends, trying to hack into” systems, says Sutton, or “Nigerian princes sending you emails (asking for) your bank information.” The cybercrime of today, he says, has “evolved into something much more sophisticated to a level where people are talking about this being the fifth dimension of warfare” (after land, sea, air, and space).

In a webinar presented recently at Babson’s Miami campus, Sutton addressed the threat of cyberattacks and offered three tips on how companies can better protect themselves:

Invest in a Cybersecurity Team

This is different from an IT team, which is “going to be focused on IT projects,” Sutton says. A cybersecurity expert knows how to assess cyber risk and then build a program and strategy that is aligned with the business to mitigate it.

Invest in Cyber Controls

“Small- to mid-sized companies that want to roll that dice and say, ‘I won’t be targeted,’ leave themselves very exposed if they don’t invest in the most basic of cyber controls,” he says. Measures such as endpoint controls to stop malware and viruses and multifactor authentication “so you can be confident only your employees are ‘logging in’ are now table stakes,” he says.

Update Software and Plug Holes

“Companies hurt themselves because of a basic lack of IT hygiene,” Sutton says. Basic updates often are overlooked in favor of other initiatives, he explains, adding, “Plugging holes or patching is the digital equivalent of locking your front door.”

Some cyberattackers “are simply opportunistic,” Sutton says, “like a criminal walking around a neighborhood looking for open doors. They can see all the holes that (a company) is trying to patch. All they need is one hole, one gap, one opportunity, and they are in.”

Posted in Insights

More from Insights »

Latest Stories

Babson Study Reveals the Power of Customer Kindness New Babson-funded research shows that customer kindness can boost employee satisfaction, reduce turnover, and spark a cycle of positivity in service industries.
By
Hillary Chabot
Writer
Hillary Chabot
Hillary Chabot is a writer for Babson Thought & Action and Babson Magazine. An award-winning journalist, she is known for her insightful reporting and dedication to detailed storytelling. With a career spanning over two decades, she has covered a wide range of topics, from presidential campaigns and government policy to neighborhood issues and investigative series. As a reporter for The Boston Herald, Hillary earned a reputation for tenacity and integrity. Her work at Babson College fuels her passions—to learn something new every day and conduct thoughtful, empathic interviews. She’s thrilled to be at Babson College, where students, faculty, staff members and classes provide compelling copy daily.
September 3, 2025

Posted in Community, Insights

Three photos in a side-by-side collage depict Michael Kopelman coaching, Brady Anderson in action, and the doubles team celebrating
Courting Success: How Babson Tennis Teams Transformed into National Powerhouses With championships and top-tier recruiting classes, Babson Director of Tennis Michael Kopelman has overseen the transformation of the men’s and women’s programs into national powerhouses.
By
Scott Dietz
Writer
Scott Dietz
Scott Dietz is Babson College's Associate Athletic Director for Strategic Communications. Dietz is responsible for the department's internal and external communications, including branding, campus engagement, marketing, social media, sponsorships and website management. Additional duties consist of event coverage, facilitation of interview requests, media pitching, video content, writing and editing. Before Babson, Dietz spent 13-plus years at fellow NEWMAC institution Wheaton College, worked for the NFL, New England Patriots, and in the media relations department with the NBA's Cleveland Cavaliers. A native of South Park, PA, Dietz began his sports information career at Westminster College.
September 2, 2025

Posted in Community

Babson Build students from HBCUs participate in an exercise in the Weissman Foundry
An Entrepreneurial Summer: How Babson Impacts Communities Year-Round The school year may be over, but Babson’s work of educating entrepreneurial leaders doesn’t stop. In the summer, many entrepreneurs, educators, and leaders descend on campus. They come from around the globe to connect and to learn. What they take away from the College can impact their companies, their classrooms, and their communities.
By
John Crawford
Senior Journalist
John Crawford
A writer for Babson Thought & Action and the Babson Magazine, John Crawford has been telling the College’s entrepreneurial story for more than 15 years. Assignments for Babson have taken him from Rwanda to El Salvador, from the sweet-smelling factory of a Pennsylvania candy maker, to the stately Atlanta headquarters of an NFL owner, to the bustling office of a New York City fashion designer. Beyond his work for Babson, he has written articles and essays for The Philadelphia Inquirer, Notre Dame Magazine, The Good Men Project, and other publications. He can be found on Twitter, @crawfordwriter, where he tweets about climate change.
August 29, 2025

Posted in Community, Entrepreneurial Leadership