Cybercrime: Bain Expert Offers 3 Tips to Thwart Attacks

A woman and man look on a row of computer screens
Listen

When it comes to preventing cyberattacks, companies are operating under a set of outdated notions, says Mark Sutton MBA’09, senior vice president and chief information security officer for Bain Capital.

Companies often treat cyberattacks as purely a “tech” problem, to be solved in an IT back office, he says, when really it needs to be tackled in the boardroom by the leaders making senior business-risk decisions.

Mark Sutton, senior VP and chief information security officer at Bain Capital
Mark Sutton MBA’09, senior vice president and chief information security officer at Bain Capital

“Cybercrime isn’t a criminal endeavor; it’s a business,” Sutton asserts. “To protect your company, you have to understand who may want to target you, how they may compromise your network and what your most critical and sensitive digital assets are.”

It seems almost quaint now to recall a once-pervasive image of cybercriminals “as geeks in their parents’ basement with no real friends, trying to hack into” systems, says Sutton, or “Nigerian princes sending you emails (asking for) your bank information.” The cybercrime of today, he says, has “evolved into something much more sophisticated to a level where people are talking about this being the fifth dimension of warfare” (after land, sea, air, and space).

In a webinar presented recently at Babson’s Miami campus, Sutton addressed the threat of cyberattacks and offered three tips on how companies can better protect themselves:

Invest in a Cybersecurity Team

This is different from an IT team, which is “going to be focused on IT projects,” Sutton says. A cybersecurity expert knows how to assess cyber risk and then build a program and strategy that is aligned with the business to mitigate it.

Invest in Cyber Controls

“Small- to mid-sized companies that want to roll that dice and say, ‘I won’t be targeted,’ leave themselves very exposed if they don’t invest in the most basic of cyber controls,” he says. Measures such as endpoint controls to stop malware and viruses and multifactor authentication “so you can be confident only your employees are ‘logging in’ are now table stakes,” he says.

Update Software and Plug Holes

“Companies hurt themselves because of a basic lack of IT hygiene,” Sutton says. Basic updates often are overlooked in favor of other initiatives, he explains, adding, “Plugging holes or patching is the digital equivalent of locking your front door.”

Some cyberattackers “are simply opportunistic,” Sutton says, “like a criminal walking around a neighborhood looking for open doors. They can see all the holes that (a company) is trying to patch. All they need is one hole, one gap, one opportunity, and they are in.”

Posted in Insights

More from Insights »

Latest Stories

Warren Buffett
Buffett Retires: Babson Professors Highlight Lessons from a Historic Transition Warren Buffett’s retirement is more than a milestone, Babson thought leaders say. It’s also a masterclass in thoughtful succession and cultural continuity.
By
Hillary Chabot
Writer
Hillary Chabot
Hillary Chabot is a writer for Babson Thought & Action and Babson Magazine. An award-winning journalist, she is known for her insightful reporting and dedication to detailed storytelling. With a career spanning over two decades, she has covered a wide range of topics, from presidential campaigns and government policy to neighborhood issues and investigative series. As a reporter for The Boston Herald, Hillary earned a reputation for tenacity and integrity. Her work at Babson College fuels her passions—to learn something new every day and conduct thoughtful, empathic interviews. She’s thrilled to be at Babson College, where students, faculty, staff members and classes provide compelling copy daily.
May 30, 2025

Posted in Community, Insights

Zainabou Thiam ’28 sits at a table selling products to waiting customers
Paying Homage to One’s Ancestors Through Entrepreneurship Zainabou Thiam ’28 was raised in the values of Senegal. With the help of Babson, she’s growing her venture, Sunu Body, an African-inspired skin care and wellness brand.
By
John Crawford
Senior Journalist
John Crawford
A writer for Babson Thought & Action and the Babson Magazine, John Crawford has been telling the College’s entrepreneurial story for more than 15 years. Assignments for Babson have taken him from Rwanda to El Salvador, from the sweet-smelling factory of a Pennsylvania candy maker, to the stately Atlanta headquarters of an NFL owner, to the bustling office of a New York City fashion designer. Beyond his work for Babson, he has written articles and essays for The Philadelphia Inquirer, Notre Dame Magazine, The Good Men Project, and other publications. He can be found on Twitter, @crawfordwriter, where he tweets about climate change.
May 29, 2025

Posted in Entrepreneurial Leadership

The champion tennis players pose for a photo with their trophies alongside their coaches
Repeat Champs: Babson’s Doubles Team Nets Second Tennis National Title Olivia Soffer ’25 and Matia Cristiani ’26 captured their second consecutive NCAA Division III doubles national championship in women’s tennis.
By
May 28, 2025

Posted in Community