Some predictions for 2023. We will see most security frameworks continue to fail in 2023 for a simple reason: complexity. And the role of CISO will be elevated to be on the board or reporting directly to the CEO.
The increase in cybersecurity compliance requirements is an opportunity for Zero Trust strategies to be further embraced. This makes the best sense for the growing decentralized workforces which is one of the biggest trends to continue into 2023.
Privacy engineering has become a top architecture challenge. Compliance with local, regional, and international data privacy laws is now a vital business concern, and there’s immense pressure on R&D to effectively implement privacy engineering in ways that bake in compliance.
As the CCPA comes into effect in the new year, we should prepare to see stricter regulations unfold both in the US and at a national level. Companies hiring for the CISO role must ensure candidates are informed of the legal expectations and are up to speed with protocols for security incidents.
Fraud Is Affecting US and Non-Western Markets Differently: What the US Can Do to Gain Consumer Trust
In the US, the uptick in fraud has decreased consumer trust in brands and the digital services they use. 36% of US consumers have experienced a combined share of online fraud and personal online breaches, and only 33% of consumers saying they can trust the digital services they use.
Things have been tough recently in the cyber insurance industry. Businesses have a difficult time finding affordable policies while underwriters struggle to return loss ratios to profitable levels. These challenging times, however, are forging a resurgence in cyber business intelligence.
The software supply chain attack surface is a lot more complicated now, and can be compromised at every stage. Developers are the new high-value targets and we have seen developers fall victim to stolen credentials and secrets, compromised workstations, CI/CD attacks and malicious packages that end up in source code.
The resources to get past traditional MFA solutions are now available to even the most rudimentary hackers, and many MFA platforms simply aren’t designed to keep up – with either hackers or evolving guidelines.
Layered security means using various complementary technologies, systems, and processes to ensure reactive and proactive defenses against cyber threats. For optimal security, these many systems and technologies must share information.
Data backup and recoverability are more than just a budget line item – they are the last line of defense for businesses and will be the most valuable asset they have when suffering from a ransomware attack.
