À mesure que les environnements gagnent en complexité et que les attaques potentielles deviennent plus sophistiquées, les dirigeants d’entreprise mèneront des initiatives stratégiques en matière de cyber-résilience qui placeront la continuité d’activité et la récupération des données au cœur des efforts de préparation et de sécurité cybernétiques.
It’s no longer enough to leave the cybersecurity decisions to the security team alone. Executive business leaders in 2024—both because of new regulations and best practices—must put cybersecurity expertise on their boards and make cyber resilience a common goal across all lines of business. The onus of these efforts isn’t only to thwart bad actors and avoid attacks, but it’s also to successfully recover from malicious actions with critical resources and data safe and secure from exploitation. With cyber resilience, business continuity becomes the primary goal.
Here we compile some of our executives’ thoughts on key focus areas in 2024 that will support and enable business leaders’ efforts to transform their approach to security to ultimately achieve true cyber resilience. Emerging technologies as well as business best practices will help ensure success with data recovery, business continuity, and cyber resilience.
La direction s’engage en faveur de la sécurité
“When it comes to cyber preparedness, I expect the level of engagement by members of the C-suite, including the CEO, to go up in 2024. It has to.” – Rahul Pawar, Global Vice President, Security GTM and CTO
Les dirigeants de haut niveau chercheront à s’adjoindre l’expertise de spécialistes de la sécurité au sein de leurs conseils d’administration afin d’orienter les décisions stratégiques en s’appuyant sur les meilleures pratiques en matière de cybersécurité. Non seulement de nouvelles réglementations exigent la communication rapide et précise des failles de sécurité, mais la protection et la Recovery des données sont désormais considérées comme un facteur de différenciation concurrentiel pour les entreprises.Les données d’une enquête d’IDC montrent that just 33% of senior executives are involved in current cyber preparedness initiatives and that must change. Fostering an environment where C-suite leaders participate in recovery exercises is also seen as key to preparedness. Equipping the board with holistic security intelligence will bring businesses closer to cyber resilience and show customers the company’s commitment to protecting data.
Les équipes informatiques se regroupent et échangent des informations
“Any company that continues to operate in silos will find themselves at a serious disadvantage when they are attacked.” – Reza Morakabati, CIO
À mesure que le paysage des menaces s’étend et que les attaques gagnent en sophistication, les différents domaines de l’informatique uniront leurs forces pour prévenir les intrusions et accélérer la Recovery. La collaboration entre les équipes d’exploitation informatique (ITOps) et d’exploitation de la sécurité (SecOps) continuera d’évoluer en 2024, car toute entreprise qui persiste à fonctionner en silos se retrouvera dans une situation très défavorable en cas d’attaque. En combinant les informations issues des outils des différents services (réseaux, sécurité, cloud et autres), les professionnels de la cybersécurité pourront identifier plus rapidement les comportements anormaux qui constituent des signes précurseurs d’une attaque. La suppression des cloisonnements entre les équipes et la définition d’objectifs communs pour les professionnels de l’informatique permettront aux entreprises de mieux résister aux attaques et de se remettre plus rapidement des incidents.
L’IA et l’automatisation accélèrent les interventions de sécurité
“With AI comes quicker response times, better focused resources/reduced alert fatigue, and more time to focus on effective threat mitigation strategies – all benefits for a cybersecurity team that needs to see the full picture.” – Alex Janas, Field Security CTO
Generative AI took the world by storm in 2023, and this year, leaders will explore the use cases that would best move their business forward. In the realm of cybersecurity, AI represents proactive threat management and speedy response to attacks. Coupled with automation, GenAI can more quickly parse through myriad logs across systems and devices to identify attacks and kick off actions to prevent extensive damage and mitigate risks to key resources and data. While executives must explore the ethics of AI and put proper governance guardrails in place, the technology promises to reduce the noise for IT and security pros tracking alerts, events, and incidents, and to point toward the true source of concern more quickly.
Les menaces évoluent à mesure que les acteurs malveillants adoptent eux aussi l’IA
“Attackers may even go so far as to run predictive modeling to understand the degree of impact or discover new parameters and techniques that lead to creating a new emerging threat.” – Alex Janas
GenAI advancements aren’t exclusive to the good guys. Bad actors with malicious plans will also tap the technology to discover vulnerable assets and innovative ways to exploit them. Using AI-driven analysis, cybercriminals will seek to impose maximum damage with minimal effort. Attackers may even go so far as to run predictive modeling to understand the degree of impact or discover new parameters and techniques that lead to creating a new emerging threat.
L’IA s’intègre aux compétences en matière de sécurité
“Being the smartest person in the room will be table stakes, while knowing what you don’t know will be the killer skill of the future.” – Martha Delehanty, Chief People Officer
Cybersecurity always tops the list of hottest skills in technology, and for 2024, HR leaders and hiring managers will be most interested in candidates with diverse technological skill sets who can address everything from IT and security operations to AI management and data recovery. In the ransomware-era, with data security and incident response skills identified as a significant gap, there will continue to be a strong demand for CISOs and CIOs that can bridge together the worlds of ITOps and SecOps so that companies can ensure they are thinking about security all the way from protecting and identifying threats to full recovery. And despite the growing popularity of GenAI, human oversight will remain crucial, requiring companies to prioritize ongoing education and upskilling to ensure their teams can leverage AI technologies to their full potential while maintaining vigilance over their systems.
“I believe within the next several years we will see more compliance, security, and cybersecurity experts fill board seats, similar to financial experts that have long been recruited as necessary board members.” – Danielle Sheer, Chief Legal and Compliance Officer
En 2024, la cyber-résilience exigera des dirigeants d’entreprise qu’ils modifient leur approche en matière de sécurité et de Recovery. Les tendances mentionnées ci-dessus, ainsi que d’autres, seront le moteur d’une transformation qui permettra aux entreprises non seulement de prévenir de manière proactive un plus grand nombre d’attaques, mais aussi, et surtout, de se remettre rapidement d’une menace imminente. Être préparé et capable de se remettre d’une attaque permettra à votre entreprise de se démarquer à l’ère du numérique, alors que la cyber-résilience devient une condition sine qua non.
Experience for yourself how Commvault Cloud can help boost your organization’s cyber resilience ici.
