John T. Chambers Quotes

I think every organization needs to assume that they are compromised.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

When a hacker gains access to any corporate data, the value of that data depends on which server, or sometimes a single person's computer, that the hacker gains access to.

There are two types of companies: those that have been hacked, and those who don't know they have been hacked.

If a serious and sophisticated attacker has enough time he or she will get into a digital network. Governments and private corporations need to be able to detect an attacker on their network quickly, quarantine him completely and then kick him off.

What you really want is for a cyberattack to be very costly and risky so it is used only rarely and only against really high-value targets.

Every single company knows that there is more that they can do to keep themselves safe from cyber-crime.

Cloud computing is a challenge to security, but one that can be overcome.

There is no data base that is totally secure. The hackers are always one step ahead and have a vested interest in obtaining the data.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

Effective cyber-security should be considered an investment.

Everything becomes connected, and cyber security becomes the top issue for CEOs. An average company has 40-60 security vendors, and they have a violation every three months with viruses.

When Target gets hacked, I don't hear people saying, 'Hey, was it Kohl's? Was it Wal-Mart?' It doesn't matter. There was a hack; you deal with it.

Too many public and private entities simply don't take advantage of tools already at their disposal to protect themselves from hackers. No amount of information sharing will help solve that problem.

If you find a node that you can penetrate, that you can eliminate, and draw more information for future operations, I think it's prudent to do.

After the investigation of Operation Aurora, the cyberattack on Google from within China that was revealed in 2010, I realized a completely new type of security strategy and technology was needed.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.

Our view is that if the network is involved, then we are there to protect it. Based on that, future developments will revolve around ensuring data, networks and applications are protected.

I'd be the first to say that cybersecurity is a difficult and challenging matter.

We must have the strictest adherence to security procedures to protect against compromise by hostile foreign powers.

Well, Keith Alexander, the former director of the NSA wants to say every company in the United States falls under one of two categories, those that have been hacked and those that don't yet know it.

If you are a big company, a big website, and lots of users come to your website, you will have attacks, and you have to deal with that. It just cannot be a reason to take actions to exit certain markets.

I don't think we can afford to wait when it comes to cybersecurity. I think that every day we wait, if an attack occurs - and we're getting hit every day - but if a greater attack occurs, it's going to be on the head of Congress for not acting.