Interview, Podcast
An Evolution in the Cybersecurity Landscape
- Information sharing is projected to evolve from threat data to broader analytics and active participation in programs like the Cyber Information Sharing Collaboration Program (CISCP) and partnerships with the FBI's National Cyber Forensics Training Alliance (NCFTA).
- Remote and hybrid work models are expected to introduce new security challenges, including unsecured home networks, compromised hardware, and the loss of informal office communication, which hinders the detection of anomalous login behavior and leaves employees isolated in identifying suspicious activity.
- To manage rising volumes of security events and phishing campaigns, organizations plan to significantly invest in automation, vendor solutions, and capabilities that automate SOC analyst decision-making to free human resources for complex machine learning and data analysis.
- Security strategies will shift toward validating real-world technical capabilities, such as host isolation and system restoration, through practical drills rather than relying solely on theoretical tabletop exercises.
- The cybersecurity landscape is expected to be shaped by the proliferation of nation-state tools in the marketplace and AI-driven malware designed to evade detection, while the Cyber Incident Reporting Act and Ransomware Disclosure Act necessitate private-public sector agreements on defining "substantial" incidents for reporting.
- Over the next five to 10 years, defense philosophies are anticipated to become increasingly technology- and data-driven, leveraging innovations like homomorphic encryption, blockchain, and quantum computing to address evolving threats.
- Despite improvements in software and infrastructure security, the rise of cybercrime business models and increased connectedness is expected to drive a continued increase in the volume of attacks, maintaining a state of perpetual engagement described as a "way of life."
- Ongoing executive orders and investments from the government and private sector are expected to raise the baseline for security, though security programs must continually evolve to keep pace with attacks that make consumers more reluctant to share data.
- The sector must maintain high standards for managing complexity and supply chain risks to prevent localized weaknesses from causing widespread ripples, while phishing testing remains a critical method for employee awareness and learning.