CS Jan-Feb 2024

More documents

Recommendations

Info

cybercrime crisis is behind us, the past 18 months have brought a worldwide economic uncertainty and geopolitical tension at a level not seen for decades," says Threat Quotient. "The resulting energy crisis, supply chain impacts and effects on employment are sending shockwaves throughout the physical and digital world, and, wherever there is disruption, cybercriminals and nation-state actors are always on hand to capitalise on the situation. "Right now, they are leveraging new tools, such as automation and generative artificial intelligence [AI], to make attacks more sophisticated and deceptive. As the volume and variety of cyber threats increase exponentially, and skilled cybersecurity workers remain in short supply, senior cybersecurity leaders face a relentless resource challenge: how to protect the organisation in an environment where budgets and personnel are under pressure." Over the three years that it has undertaken this survey, Threat Quotient has tracked the adoption of cybersecurity automation as a solution to this problem. "Our 2023 State of Cybersecurity Automation Adoption research finds that organisations are leaning on automation to handle a growing percentage of cybersecurity use cases, with the goal of increasing efficiency, responding to regulation and compliance requirements and increasing productivity. Overall, they consider automation to be important in their organisation and they are continuing to commit budget to automation programmes - even though they are having to cut back in other areas to do so. "However, our study also shows that the problems highlighted in previous years remain - in fact, they have grown. Every respondent said they had experienced difficulties of some kind when implementing cybersecurity automation. These range from a lack of trust in the outcomes of automated processes, slow adoption by users, bad decisions resulting from automation and a lack of skill among users." The company points to the progress that has been made over the past year. "Organisations have been actively using automation to streamline routine tasks and improve their cybersecurity posture." However, even with this progress, significant challenges remain, it adds. "Complex technological landscapes, skill shortages and difficulties in securing management support remain as roadblocks." Threat Quotient offers several actionable recommendations, tailored for security professionals responsible for automation efforts, to help them enhance the effectiveness and efficiency of their cybersecurity automation initiatives: 1. Invest in Smart Tools and Flexibility for Wellbeing: To improve threat intelligence analyst wellbeing and employee retention, invest in smarter tools that simplify work processes. Smart tools equipped with AI capabilities empower analysts to make faster and more accurate decisions 2. Choose Proven Use Cases for Automation: Select cybersecurity automation use cases that have demonstrated value by saving time and improving security procedures. Popular choices, such as threat intelligence management, incident response, phishing analysis and vulnerability management, offer tangible benefits in terms of efficiency and effectiveness 3. Integrate Data Sources for Contextual Insights: Emphasise the importance of integration with multiple data sources when selecting cybersecurity automation solutions. This integration enhances context for decision-making, enabling automation to focus on relevant and high-priority events 4. Address Implementation Challenges through Training: Recognise that implementing cybersecurity automation is not without challenges. Combat issues like "lack of trust in outcomes" and "slow user adoption" by investing in comprehensive training programmes 5. Align Automation Metrics with Organisational Goals: Secure management support for automation initiatives by defining clear metrics for success and aligning them with organisational goals. Balance quantitative metrics - improved efficiency and resource management - with qualitative factors, like employee satisfaction and retention. By following these recommendations, concludes Threat Quotient, "organisations can navigate the complexities of cybersecurity automation adoption, harness its potential benefits, and effectively address challenges to enhance overall security posture and operational efficiency". 34 computing security Jan/Feb 2024 @CSMagAndAwards www.computingsecurity.co.uk
SAVE THE DATE RDS, Dublin: 22-23 Nov 2023 Infrastructure • Services • Solutions DataCentres Ireland combines a dedicated exhibition and multi-streamed conference to address every aspect of planning, designing and operating your Datacentre, Server/Comms room and Digital storage solution – Whether internally, outsourced or in the Cloud. DataCentres Ireland is the largest and most complete event in the country. It is where you will meet the key decision makers as well as those directly involved in the day to day operations. EVENT HIGHLIGHTS INCLUDE: Multi Stream Conference 25 Hours of Conference Content International & Local Experts 60+ Speakers & Panellists 100+ Exhibitors Networking Reception Entry to ALL aspects of DataCentres Ireland is FREE • Market Overview • Power Sessions • Connectivity • Regional Developments • Open Compute Project • Heat Networks and the Data Centre • Renewable Energy • Standby Generation • Updating Legacy Data Centres Meet your market Lead Conference Sponsor Platinum Sponsor Lanyard Sponsor Session Sponsors For the latest information & to register online visit www.datacentres-ireland.com
Page 1: Computing Security Secure systems,
Page 4 and 5: Secure systems, secure data, secure
Page 6 and 7: news Bernard Montell. HORNETSECURIT
Page 8 and 9: news Sukru Ilker Birakoglu. SUPPORT
Page 10 and 11: 2024 predictions THROUGH THE ‘LUR
Page 12 and 13: 2024 predictions Aaron Kiemele, Jam
Page 14 and 15: training SAFEGUARDING HR IN THE AGE
Page 16 and 17: cybersecurity THE TOP-LEVEL FIBRE B
Page 18 and 19: artificial intelligence AI - WHERE
Page 20 and 21: artificial intelligence Gareth Lock
Page 22 and 23: phishing PHISHING FOR THE ANSWERS D
Page 24 and 25: ansomware WE SHALL NOT BE MOVED! SE
Page 26 and 27: ansomware Raja Patel - Sophos: cybe
Page 28 and 29: attack… attack POINT OF IMPACT IN
Page 30 and 31: attack… attack Amit Sinha, DigiCe
Page 32 and 33: cybercrime STAYING ABOVE THE WATER
Page 36: Computing Security Secure systems,

CS Jan-Feb 2024

Create successful ePaper yourself

Delete template?

Save as template?