Four macro trends in cybersecurity and what they mean for you

J. Michael Daniel

Cyber Threat Alliance (CTA)

Abstract:

A well-known cybersecurity expert once joked that “It’s easy to be a cybersecurity expert. Just say tomorrow will be worse than today, and you’ll probably be right.” While most users and all practitioners have a sense that cyber threats are continuing to get worse, a key question is how are the threats evolving. Only by understanding the overarching trends in the field can cybersecurity practitioners and companies adapt and continue to provide effective protections for their customers and clients. In this talk, Michael Daniel will discuss four major trends driving changes to cyber threats, the implications of these changes, and some responses the cybersecurity industry can take to address these evolving threats.

To give you some more detail, the four trends I would talk about are:

More diverse (IOT, OT, etc)
More organized (actors are improving their capabilities)
More intense (more actors in the field)
More dangerous (greater dependence)

Implications for cybersecurity industry:

Point solutions to point problems does not make for a sustainable business model
Fragmentation in cybersecurity industry benefits malicious actors
Increasing volume of activity couple with systemic risk increases danger from unintended consequences

Responses:

Adopt standards / improve interoperability at all levels
Move competition to a higher point on the value chain
Measure cybersecurity efficacy from a customer standpoint
Invest in resilience
Change market incentives to support cybersecurity.