Conference Presentation, Keynote, Fireside Chat
Security Markets: The Lay of the Land
- The "software eating the world" trend is expected to continue, accompanied by emerging security challenges and a shift toward devices with security built-in, such as Apple's iOS and Google Chromebooks.
- Ransomware is predicted to evolve into cloud-aware variants that modify data within cloud platforms to mine cryptocurrency, while e-crime syndicates increasingly utilize cryptocurrency applications.
- Phishing and pretexting are forecasted to remain the primary breach causes at approximately 93%, alongside persistent issues with security patching and change management.
- Despite root cause data, security spending is expected to remain heavily concentrated on authentication, authorization, and malware detection.
- Mobile and cloud adoption are driving a need for forward-looking CISOs to resolve issues during design and build phases rather than through reactive measures.
- Standards-based compliance, specifically NIST 800-53 and FedRAMP, is anticipated to become more measurable and meaningful.
- Cloud configuration and change control are projected to become significant challenges as organizations move to a cloud-native environment.
- Venture capital investment in cybersecurity is predicted to substantially exceed the $7.6 billion invested last year.
- CISO recruitment cycles are expected to continue extending well over a year.
- Cyber insurance is predicted to mature into a viable risk transfer mechanism once organizations can categorize vulnerabilities and calculate transferable risk, potentially with standardized terms and shared intelligence on how nation-state actors void policies.
- Blockchain technology is expected to influence threat intelligence sharing by creating compensation systems where participants are rewarded for providing information.
- Zero Trust and Beyond Corp concepts are anticipated to drive investment and technology themes by eliminating implicit trust relationships.
- In a 10-year outlook, the industry will transition to a "all cloud, all the time" model where most data center presence is limited to secrets management infrastructure.
- Purpose-built devices with the "security built-in" model are expected to replace previous bolt-on security solutions.