A medida que los entornos se vuelven más complejos y los posibles ataques más sofisticados, los responsables empresariales impulsarán iniciativas estratégicas de ciberresiliencia que sitúen la continuidad del negocio y la Recovery de datos en el centro de las medidas de preparación y seguridad cibernéticas.
It’s no longer enough to leave the cybersecurity decisions to the security team alone. Executive business leaders in 2024—both because of new regulations and best practices—must put cybersecurity expertise on their boards and make cyber resilience a common goal across all lines of business. The onus of these efforts isn’t only to thwart bad actors and avoid attacks, but it’s also to successfully recover from malicious actions with critical resources and data safe and secure from exploitation. With cyber resilience, business continuity becomes the primary goal.
Here we compile some of our executives’ thoughts on key focus areas in 2024 that will support and enable business leaders’ efforts to transform their approach to security to ultimately achieve true cyber resilience. Emerging technologies as well as business best practices will help ensure success with data recovery, business continuity, and cyber resilience.
La dirección ejecutiva apuesta por la seguridad
“When it comes to cyber preparedness, I expect the level of engagement by members of the C-suite, including the CEO, to go up in 2024. It has to.” – Rahul Pawar, Global Vice President, Security GTM and CTO
Los ejecutivos de alto nivel buscarán contar con expertos en seguridad en sus consejos de administración para que orienten las decisiones empresariales basadas en las mejores prácticas de ciberseguridad. No solo existen nuevas normativas que exigen la comunicación rápida y precisa de las brechas de seguridad, sino que la protección y Recovery de datos se consideran ahora un factor diferenciador competitivo para las empresas.Los datos de una encuesta de IDC muestran that just 33% of senior executives are involved in current cyber preparedness initiatives and that must change. Fostering an environment where C-suite leaders participate in recovery exercises is also seen as key to preparedness. Equipping the board with holistic security intelligence will bring businesses closer to cyber resilience and show customers the company’s commitment to protecting data.
Los equipos de TI se unen y comparten información
“Any company that continues to operate in silos will find themselves at a serious disadvantage when they are attacked.” – Reza Morakabati, CIO
A medida que el panorama de amenazas se amplía y los ataques se vuelven más sofisticados, los distintos ámbitos de las TI unirán fuerzas para prevenir las intrusiones y acelerar la Recovery. La colaboración entre los equipos de Operaciones de TI (ITOps) y de Operaciones de Seguridad (SecOps) seguirá evolucionando en 2024, ya que cualquier empresa que siga operando en silos se encontrará en una grave desventaja cuando sufra un ataque. Al combinar la información procedente de herramientas de redes, seguridad, la nube y otros grupos de TI, los profesionales de la ciberseguridad podrán identificar más rápidamente comportamientos anómalos que constituyan un indicador temprano de un ataque. Romper los silos entre los equipos y establecer objetivos comunes para los profesionales de TI hará que las empresas sean más resistentes ante los ataques y se recuperen más rápidamente.
La IA y la automatización agilizan la respuesta en materia de seguridad
“With AI comes quicker response times, better focused resources/reduced alert fatigue, and more time to focus on effective threat mitigation strategies – all benefits for a cybersecurity team that needs to see the full picture.” – Alex Janas, Field Security CTO
Generative AI took the world by storm in 2023, and this year, leaders will explore the use cases that would best move their business forward. In the realm of cybersecurity, AI represents proactive threat management and speedy response to attacks. Coupled with automation, GenAI can more quickly parse through myriad logs across systems and devices to identify attacks and kick off actions to prevent extensive damage and mitigate risks to key resources and data. While executives must explore the ethics of AI and put proper governance guardrails in place, the technology promises to reduce the noise for IT and security pros tracking alerts, events, and incidents, and to point toward the true source of concern more quickly.
Las amenazas evolucionan a medida que los ciberdelincuentes también adoptan la inteligencia artificial
“Attackers may even go so far as to run predictive modeling to understand the degree of impact or discover new parameters and techniques that lead to creating a new emerging threat.” – Alex Janas
GenAI advancements aren’t exclusive to the good guys. Bad actors with malicious plans will also tap the technology to discover vulnerable assets and innovative ways to exploit them. Using AI-driven analysis, cybercriminals will seek to impose maximum damage with minimal effort. Attackers may even go so far as to run predictive modeling to understand the degree of impact or discover new parameters and techniques that lead to creating a new emerging threat.
La IA se integra en las competencias en materia de seguridad
“Being the smartest person in the room will be table stakes, while knowing what you don’t know will be the killer skill of the future.” – Martha Delehanty, Chief People Officer
Cybersecurity always tops the list of hottest skills in technology, and for 2024, HR leaders and hiring managers will be most interested in candidates with diverse technological skill sets who can address everything from IT and security operations to AI management and data recovery. In the ransomware-era, with data security and incident response skills identified as a significant gap, there will continue to be a strong demand for CISOs and CIOs that can bridge together the worlds of ITOps and SecOps so that companies can ensure they are thinking about security all the way from protecting and identifying threats to full recovery. And despite the growing popularity of GenAI, human oversight will remain crucial, requiring companies to prioritize ongoing education and upskilling to ensure their teams can leverage AI technologies to their full potential while maintaining vigilance over their systems.
“I believe within the next several years we will see more compliance, security, and cybersecurity experts fill board seats, similar to financial experts that have long been recruited as necessary board members.” – Danielle Sheer, Chief Legal and Compliance Officer
La ciberresiliencia en 2024 exigirá que los líderes empresariales cambien su forma de abordar la seguridad y la Recovery. Las tendencias mencionadas anteriormente, junto con otras, impulsarán una transformación que permita a las empresas prevenir de forma proactiva un mayor número de ataques, pero, lo que es más importante, recuperarse rápidamente cuando una amenaza sea inminente. Estar preparado y ser capaz de recuperarse de los ataques marcará la diferencia para tu empresa en esta era digital, en la que la ciberresiliencia se ha convertido en un requisito imprescindible.
Experience for yourself how Commvault Cloud can help boost your organization’s cyber resilience aquí.
