Latest / CYBR.Signal / New Tools and Tech

Transcript

New Tools and Tech · CYBR.Signal

• 0:00
  SPEAKER_00: And hello, everybody.
• 0:01
  SPEAKER_00: Happy Cyber Sunday.
• 0:02
  SPEAKER_00: Hope you're doing well.
• 0:03
  SPEAKER_00: So, one of the things that everybody's hearing these days is AI, AI, AI.
• 0:10
  SPEAKER_00: And yes, it is a very important topic.
• 0:13
  SPEAKER_00: How are you using it in your environment?
• 0:15
  SPEAKER_00: Are you using it in your environment?
• 0:17
  SPEAKER_00: How do you make sure it's used well in your environment?
• 0:20
  SPEAKER_00: But I don't want to focus just on AI.
• 0:22
  SPEAKER_00: What I kind of want to talk about in this is modern tools, modern technology, such as AI and other tools that are enabling you as a security leader, anybody who's building a security program, to do some basic things in your security program that haven't been able to be done exactly effectively over the years based on technology.
• 0:50
  SPEAKER_00: So let's make an example, let's give an example.
• 0:53
  SPEAKER_00: So specifically data security.
• 0:55
  SPEAKER_00: So yes, there are tools out there that have been out there for a long time that help you classify data, discover data, unstructured, structured.
• 1:04
  SPEAKER_00: Um, but a lot of that technology is has been around a long time and hasn't necessarily kept up with some of the needs, basically, of modern enterprises on how they discover data, how they classify it, how they integrate it, that kind of thing.
• 1:21
  SPEAKER_00: And it's not necessarily the the completely the fault of some of those technologies.
• 1:28
  SPEAKER_00: It's that the technology didn't exist or it wasn't easily integrated with other technologies because things like cloud weren't really there, weren't mature.
• 1:38
  SPEAKER_00: So now what you've got is a lot of data being stored in the cloud, and you've got an ease of being able to discover that a lot easier than it used to be via APIs.
• 1:48
  SPEAKER_00: So that's another modern, even though APIs have been around a long time, modern APIs that enable you to get access to create, to do discovery on data, to do posture management in your cloud, even on-premise.
• 2:05
  SPEAKER_00: Some of the modern, more modern infrastructures, mesh infrastructures, that kind of stuff are making it easier, even if you're doing on-premises type of keeping a lot of that data on-prem on your on-prem.
• 2:18
  SPEAKER_00: Some of those modern infrastructures and then those modern tools, modern technology are allowing you to discover that data, classify that data better.
• 2:26
  SPEAKER_00: And part of that modern technology is also AI.
• 2:31
  SPEAKER_00: So AI is enabling some of those tools to do classification of data a lot better than you used to be able to just with, you know, regex and strings and searching, that kind of thing.
• 2:48
  SPEAKER_00: So I guess the point of all this is what I'm saying is that we get really tied up uh in what AI is doing and what some of the modern technology like cloud is doing for us and kind of scaring us.
• 3:02
  SPEAKER_00: We've got a little bit of FUD going on from certain people and certain vendors to say you've got to have this to secure the cloud because there's a lot more access and all of those things.
• 3:11
  SPEAKER_00: But what, if you look at it from the perspective of what it's enabling, what AI is enabling, what a modern APIs is are enabling, what cloud is enabling, it's actually, if you do it right, it's enabling us to do basic security things, you know, put basic security controls in place that were a lot more difficult, you know, 15, 10, 5 years ago.
• 3:36
  SPEAKER_00: Another one is asset management.
• 3:37
  SPEAKER_00: There's a lot of tools now that you can do asset management and look at multiple different sources of truth and create one source of truth in order for you to bring in all of your assets.
• 3:49
  SPEAKER_00: Now, the assets, the growth of assets in cloud, you can argue whether that outpaces your ability to discover your assets and the technical debt to get to that point can be can be pretty daunting to overcome, especially if you're still doing a lot of uh hybrid where you're doing in on premises.
• 4:10
  SPEAKER_00: Um, but still, there's there's a lot of modern tools, modern technology that's enabling us to get back.
• 4:19
  SPEAKER_00: This is where it kind of sounds weird, but modern technology, modern tools that let us get back to basics of cybersecurity, to do things that we should have been doing, like data discovery, data classification, putting a data program and play, data security program in place, and then something like asset management where we're able to do discovery of assets and classify those and get a lot closer to a full classification of assets than we were able to do before.
• 4:48
  SPEAKER_00: So I guess the whole thing, what I'm saying is that yes, you need to look at the cybersecurity implications of modern technology like cloud, like AI, like APIs.
• 4:58
  SPEAKER_00: Those are all things you need to be wary of and make sure you're finding those and closing gaps.
• 5:04
  SPEAKER_00: But you also need to look at it as those things enable us to get back to doing security basics that help us grow our program in the first place.
• 5:12
  SPEAKER_00: So let me know what you think about that.
• 5:14
  SPEAKER_00: Talk to you next time.