Cybersecurity Awareness Month: Insights from Industry Experts

As we observe Cybersecurity Awareness Month, it’s essential to reflect on the evolving landscape of cybersecurity and the critical role that awareness plays in safeguarding our digital environments. This year, the editors at Solutions Review have gathered insights from leading industry experts to shed light on the pressing issues and strategies that organizations must consider to enhance their cybersecurity posture.

The Importance of Data Protection

Ronak Massand, CEO and Co-Founder of Adaptive, emphasizes that data is the most critical asset for any organization. He notes that hackers primarily aim to exfiltrate sensitive data during breaches, making data protection a top priority. Massand advocates for a comprehensive understanding of data lineage and access management, suggesting that organizations should focus on deeply integrating fewer tools into their infrastructure to safeguard their most valuable assets effectively.

Addressing Non-Human Identities

Baber Amin, Chief Product Officer at Anetac, highlights the often-overlooked risks associated with non-human identities. His research indicates that for every human user, there are approximately 20 non-human identities, many of which possess high-level privileges. Amin stresses the importance of adopting modern identity and access management tools to monitor both human and non-human identities, thereby minimizing the likelihood of successful attacks.

The Basics of Cyber Hygiene

Tim Eades, CEO and Co-Founder of Anetac, points out that many security breaches stem from neglected basic security practices rather than sophisticated attacks. He urges organizations to prioritize fundamental practices such as strong passwords, multi-factor authentication, and regular software updates. Eades believes that a balanced approach combining robust security hygiene with advanced tools can significantly enhance resilience against potential breaches.

Shared Responsibility in Cybersecurity

Doug Murray, CEO at Auvik, discusses the shared responsibility of cybersecurity among individuals, businesses, and governments. He warns against infrastructure sprawl and shadow IT, which can introduce significant risks. Murray advocates for a federated view of IT tools and collaboration among business leaders to reduce sprawl and overall risk exposure.

The Shift in Cybersecurity Threats

Ian Bramson, Vice President of Global Industrial Cybersecurity at Black & Veatch, notes a fundamental shift in the cybersecurity threat landscape, particularly concerning operational technology (OT) environments. He emphasizes the need for a consequence-driven approach to cybersecurity, where safety and operational uptime take precedence over traditional ROI metrics.

The Rise of Ransomware and Insider Threats

Dale “Dr. Z” Zabriskie, Field CISO at Cohesity, highlights the growing threat of ransomware and insider attacks. He stresses the importance of a multi-layered defense strategy that includes immutable snapshots, encryption, and strict access controls to ensure critical data security.

Embracing Neurodiversity in Cybersecurity

Jackie McGuire, Senior Security Strategist at Cribl, brings attention to the untapped talent pool of neurodivergent individuals in cybersecurity. She advocates for rethinking how skills are assessed and creating an inclusive environment that leverages the unique strengths of neurodiverse team members.

Navigating Generative AI Risks

Omar Khawaja, Field CISO and VP of Security at Databricks, addresses the complexities of generative AI and the associated risks. He encourages organizations to focus on specific risks relevant to their AI use cases and to avoid being driven by fear in their AI strategies.

The Need for Cyber Resilience

Jose Seara, CEO and Founder of DeNexus, emphasizes the importance of cyber resilience in the face of increasing cyber threats. He advocates for a proactive approach to identifying and measuring cyber risks in financial terms to allocate resources effectively.

The Challenge of Adversarial AI

Chaim Mazal, CSO at Gigamon, warns that adversarial AI is outsmarting current security defenses. He stresses the need for organizations to gain real-time visibility into all network traffic to detect breaches and secure sensitive data.

Rethinking Cybersecurity Training

James Hadley, CEO and Founder of Immersive Labs, critiques traditional cybersecurity training methods. He advocates for hands-on, measurable exercises that can better prepare organizations for real-world cyber threats.

The Integration of Cybersecurity and Storage Infrastructure

Eric Herzog, CMO at Infinidat, discusses the merging of cybersecurity and enterprise storage infrastructure. He emphasizes the need for proactive strategies and advanced technologies to combat the increasing cyber threats targeting storage systems.

The Importance of Identity Security

Damon Tompkins, President at Pathlock, highlights the critical role of identity security in protecting digital environments. He advocates for robust identity and access management systems to enhance security posture and comply with regulatory requirements.

The Role of APIs in Cybersecurity

Eric Schwake, Director of CyberSecurity Strategy at Salt Security, emphasizes the need for a comprehensive approach to API security. He outlines the importance of thorough API discovery, governance, and behavioral threat protection to safeguard digital ecosystems.

The Impact of AI on Cybersecurity

Kevin Bocek, Chief Innovation Officer at Venafi, discusses the dual nature of AI in cybersecurity. While AI presents new opportunities, it also introduces new threats. Bocek stresses the importance of securing machine identities and code signing to mitigate risks associated with AI technologies.

Engaging the Next Generation

Lynn Dohm, Executive Director of Women in Cybersecurity (WiCyS), advocates for engaging students in cybersecurity discussions. She emphasizes the need to simplify the message and empower young individuals to see themselves in cybersecurity roles.

Conclusion

As Cybersecurity Awareness Month unfolds, the insights from these industry experts serve as a valuable reminder of the multifaceted challenges and strategies in the realm of cybersecurity. By prioritizing data protection, addressing non-human identities, and fostering a culture of awareness and resilience, organizations can better navigate the evolving threat landscape and secure their digital futures.

For more in-depth insights and strategies, be sure to explore the full article on Solutions Review.