--- title: ICE Brings an Incubator Approach to Cybersecurity description: The standard check-list mentality is not as secure as one would think. image: https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/iStock-647273372-May-12-2022-09-30-35-07-AM.jpg --- ![websites-group](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/new-MMG-01.svg) [![](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/dropdown-new-marketsmedia-logo.svg)](https://www.marketsmedia.com/) [![](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/dropdown-menu-traders-redlogo.svg)](https://www.tradersmagazine.com/) [![](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/dropdown-menu-bestexe-logo.svg)](https://www.bestexecution.net/) [![](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/dropdown-menu-fidesk-logo.svg)](https://www.fixglobal.com/) [![](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/dropdown-fixglobal-new-logo.svg)](https://www.fixglobal.com/) - [*Facebook*](https://www.facebook.com/MarketsMedia/) - [*Twitter*](https://twitter.com/marketsmedia) - [*Linkedin*](https://www.linkedin.com/company/markets-media-llc) - [Newsletter](https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity#popup-newsletter) #### Want the latest news on securities markets -- FREE? Sign up to receive exclusive articles on topics including: - Equity market structure - Profiles of buy-side investment firms - The evolution of multi-asset-class trading - Regulation and its implications for markets - The search for liquidity in fixed income markets - The convergence of fintech and capital markets Select one or more newsletters you would like to receive: menu [![Markerts media](https://articles.marketsmedia.com/hubfs/raw_assets/public/MarketsMedia_August2021/images/header%20logo.svg "Markerts media")](https://articles.marketsmedia.com/) - [Weekly Newsletter](https://articles.marketsmedia.com/tag/weekly-newsletter) - Weekly Newsletter - ICE Brings an Incubator Approach to Cybersecurity Search - [Home](https://articles.marketsmedia.com/) - [Trending](https://articles.marketsmedia.com/tag/trending) - [Featured](https://articles.marketsmedia.com/tag/daily-email-feature) - [Sectors](https://articles.marketsmedia.com/tag/sectors) - [From The Markets](https://articles.marketsmedia.com/tag/from-the-markets) - [AWARDS](https://articles.marketsmedia.com/tag/events) - [Newsletter](https://awards.marketsmedia.com/newsletter-sign-up) - [Newsletter](https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity#popup-newsletter) Hide search Search - NewsLetter ![](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/trading-up-occ-iex-select-board-members-citadel-lands-lieblich-573x379-Jul-07-2022-09-34-11-57-AM.jpg) [ON THE MOVE: Citi Hires Artie Ambrose;...](https://articles.marketsmedia.com/on-the-move-citi-hires-artie-ambrose-natalie-a-brown-to-mesirow) ![](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/Depositphotos_445735906_L.jpg) [Trading Adapts to ESG and Sustainable...](https://articles.marketsmedia.com/trading-adapts-to-esg-and-sustainable-investing) ![](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/iStock-917493152-Jul-07-2022-09-34-19-09-AM.jpg) [Focus on FX Execution Connectivity](https://articles.marketsmedia.com/focus-on-fx-execution-connectivity) ![](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/Depositphotos_333839538_L.jpg) [TRACE Turns 20](https://articles.marketsmedia.com/trace-turns-20) 10.02.2019 By Rob Daly Weekly Newsletter # ICE Brings an Incubator Approach to Cybersecurity 10.02.2019 By Rob Daly ![ICE Brings an Incubator Approach to Cybersecurity](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/iStock-647273372-May-12-2022-09-30-35-07-AM.jpg) [Share](https://www.facebook.com/share.php?u=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) [Tweet](https://twitter.com/intent/tweet?text=US+ETFs+Have+Record+Net+Inflows&url=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) [Share](https://www.linkedin.com/cws/share?url=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) Cyber threats continuously evolve, and those firms that take a reactionary approach and relying on a standard cyber-security checklist likely will be attractive targets for hackers, according to Jerry Perullo, the chief information security officer at the Intercontinental Exchange A hacked organization's initial response is often to throw money at the problem, hire consultants, and implement a draconian security model that affects productivity, he noted during an interview on the ICE House podcast. [![](https://articles.marketsmedia.com/hs-fs/hubfs/Imported_Blog_Media/jerry-perullo-ICE-150x150-1.jpg?width=150&height=150&name=jerry-perullo-ICE-150x150-1.jpg)](https://articles.marketsmedia.com/hubfs/Imported_Blog_Media/jerry-perullo-ICE-1.jpg) Jerry Perullo, ICE "The problem of bad controls is that they get torn down," said Perullo. "You get a lot of exceptions and over-securing is a lack of securing at the end of the day." Security teams should be more like startup incubators where the staff challenges pre-set ideas and try to develop better ways to secure access to enterprise and its data. When reviewing user accounts and passwords, Perullo's team sought to find a more secure method than the standard model of an eight-character password that includes a sprinkling of capitals and special characters and has been in use for more than 20 years. The team wanted to lengthen account passwords to 15 characters and omit the complexity of including special characters. They tossed all of the necessary calculations on to the whiteboard and the math held, according to Perullo. "Then the National Institute of Standards and Technology released an updated standard that said that length was king," he said. "You can get rid of that stuff as long as you look and block out commonly used passwords." The team tested the new password format against its internally developed Kraken engine that attempts to crack the passwords of all ICE user accounts daily and found the new format was secure. Kraken's success rate also dropped steadily over the 90 days it to ICE to deploy its new security policy. "Having that machine that constantly red teaming us has exposed a lot of other things around cleaning up accounts, visibility, and looking across acquisitions and geographies," said Perullo. Implementing a red team strategy, in which an internal team acts as an adversary, as well as security information shared amongst the industry also helps ICE develop a threat matrix based on the likelihood of an attack and its potential impact on the business. "There is nothing more important than being close to the business and understanding the business and partnering with the business to understand what the impact would be," he added. Perullo also noted that having a red team deliver its findings to the IT team improves productivity when they can provide a video of a hacker trying to hack an exploit rather than giving a list of security-related tasks without context. "People will get up and go out of the room to fix it," he said. "There is no more back-and-forth." [Share](https://www.facebook.com/share.php?u=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) [Tweet](https://twitter.com/intent/tweet?text=US+ETFs+Have+Record+Net+Inflows&url=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) [Share](https://www.linkedin.com/cws/share?url=https://articles.marketsmedia.com/ice-brings-an-incubator-approach-to-cybersecurity) ![email](https://articles.marketsmedia.com/hubfs/Markets%20Media/email.svg) ### NEWSLETTER SIGN UP And receive exclusive articles on securities markets ### Related articles 1. [![](https://articles.marketsmedia.com/hs-fs/hubfs/Imported_Blog_Media/EMCA-WINNERS.jpeg?width=376&height=250&name=EMCA-WINNERS.jpeg)](https://articles.marketsmedia.com/european-markets-choice-awards-2022-the-winners) Latest News ## [European Markets Choice Awards 2022 – The Winners](https://articles.marketsmedia.com/european-markets-choice-awards-2022-the-winners) On 5 June Markets Media held its first in person European Markets Choice Awards event in London. 07.06.2022 By Markets Media 2. [![](https://articles.marketsmedia.com/hs-fs/hubfs/Imported_Blog_Media/trading-up-occ-iex-select-board-members-citadel-lands-lieblich-573x379-Jul-07-2022-09-34-11-57-AM.jpg?width=376&height=250&name=trading-up-occ-iex-select-board-members-citadel-lands-lieblich-573x379-Jul-07-2022-09-34-11-57-AM.jpg)](https://articles.marketsmedia.com/on-the-move-citi-hires-artie-ambrose-natalie-a-brown-to-mesirow) Daily Email Feature ## [ON THE MOVE: Citi Hires Artie Ambrose; Natalie A. Brown to Mesirow](https://articles.marketsmedia.com/on-the-move-citi-hires-artie-ambrose-natalie-a-brown-to-mesirow) The weekly recap of new hires, promotions and job changes in capital markets trading and technology. 07.05.2022 By Anna Lyudvig, Traders Magazine 3. [![](https://articles.marketsmedia.com/hs-fs/hubfs/Imported_Blog_Media/339299_345359258874293_1089957387_o.jpg?width=376&height=250&name=339299_345359258874293_1089957387_o.jpg)](https://articles.marketsmedia.com/summer-trading-2012-10-years-on) Latest News ## [Summer Trading 2012, 10 Years On](https://articles.marketsmedia.com/summer-trading-2012-10-years-on) A look back at a Markets Media event from a decade ago. 07.05.2022 By Traders Magazine [![MarketsMedia](https://articles.marketsmedia.com/hubfs/MarketsMedia.svg "MarketsMedia")](http://marketsmedia.com) - [About us](https://www.marketsmedia.com/about-us) - [Careers](https://www.marketsmediagroup.com/careers) - [Contact](https://www.marketsmediagroup.com/contact) - [Advertise](https://www.marketsmediagroup.com/advertise) - [Newsletter](https://awards.marketsmedia.com/newsletter-sign-up) - [Corporate Site](https://marketsmediagroup.com) - © 2026 Markets Media Holdings LLC - - Terms & Conditions - Privacy Policy {{ standard\_footer\_includes }}