Latest / CYBR.Signal / Last #CyberSunday of 2023!

Transcript

Last #CyberSunday of 2023! · CYBR.Signal

• 0:00
  SPEAKER_00: And hello, everybody.
• 0:01
  SPEAKER_00: Happy Cyber Sunday.
• 0:02
  SPEAKER_00: Hope you're doing well.
• 0:04
  SPEAKER_00: So the new year is almost upon us.
• 0:06
  SPEAKER_00: Tomorrow is the new year.
• 0:08
  SPEAKER_00: Hope uh everything around your planning and everything is going well.
• 0:12
  SPEAKER_00: Hope you're going to have a good time tonight and hope you uh start your new year off well.
• 0:17
  SPEAKER_00: Wanted to do a little bit of a new year Cyber Sunday episode, take a break from the risk stuff that I've been talking about, even though that's always involved in these discussions.
• 0:28
  SPEAKER_00: But uh wanted to do or talk about kind of three things that I see from an enterprise perspective that um we need to worry about going into 2024 or think about.
• 0:39
  SPEAKER_00: I don't want to say worry, but you know, we are security people, so we always worry.
• 0:44
  SPEAKER_00: It's part of our nature.
• 0:46
  SPEAKER_00: Um first one I don't think is a big surprise.
• 0:50
  SPEAKER_00: I don't know that any of these would be a big surprise, but um first one is AI.
• 0:55
  SPEAKER_00: Uh, yeah, everybody's talking about it.
• 0:58
  SPEAKER_00: Um, but from an enterprise perspective, I think the big thing to think about going into 2024 is how you're looking at it in your organization, how it aligns with your business objectives, how it aligns with your security program, your risk program, how it aligns with your overall governance strategy in your organization.
• 1:25
  SPEAKER_00: So, and and I'm not just talking about you know, chat GPT and things like that.
• 1:30
  SPEAKER_00: It's talking about how is your organization going to use it.
• 1:33
  SPEAKER_00: You need to be in communication if you're leading your organization, if you're a security leader, or even if you're not, you need to you're your security leader.
• 1:41
  SPEAKER_00: If you're not the CISO or the highest level person there from a security perspective, you need to be communicating with your management, your upper management to find out what that strategy is as an organization as a whole and make sure that security is involved in that discussion.
• 1:57
  SPEAKER_00: Um, so I'm not just talking about, you know, cool tech that's gonna be, even though you do need to pay attention to that, um, you really need to be informed and knowledgeable about what the overall organizational strategy is around AI so you can figure out how that goes into your policies and your procedures and what the security org needs to be thinking about from that perspective.
• 2:20
  SPEAKER_00: So, again, that business alignment conversation when it comes to AI.
• 2:25
  SPEAKER_00: The second thing, we've all been talking about this.
• 2:28
  SPEAKER_00: I don't think this is a big surprise either, is regulations.
• 2:31
  SPEAKER_00: I mean, we've been talking about that for a long time and different state regulations, different, you know, um organizations or different uh countries and their regulations, depending if you're an international or national company, and all those things you got to deal with, and all the different state regulations.
• 2:45
  SPEAKER_00: But now we got some teeth to this thing from an SEC perspective.
• 2:49
  SPEAKER_00: And assuming that stays in place, um, and nobody goes crazy and tries to sue the SEC to get all that stuff taken out, which I don't necessarily see happening, but who knows?
• 2:59
  SPEAKER_00: Um, we're already seeing some activity, already seeing some people do 8K filings on breaches, some big ones with like Xfinity and others.
• 3:08
  SPEAKER_00: And this um it's gonna be interesting to watch the SolarWinds case play out and how SolarWinds is starting to back up their CISO and go on.
• 3:18
  SPEAKER_00: I haven't seen any news about that recently, but it is something from an enterprise perspective and from a security leaders leadership perspective you really need to be worried about in 2024.
• 3:28
  SPEAKER_00: Um, there's a lot going on there, and um there's a lot of friends that I know that are public organizations that are a little bit scared about it, or at least you know, worried or concerned or need to think through it.
• 3:41
  SPEAKER_00: So that's the second thing.
• 3:43
  SPEAKER_00: And then from a straight up uh cybersecurity vendor perspective in 2024, I am personally a little bullish on the economy.
• 3:54
  SPEAKER_00: I think some of that's coming from the perspective of um the Fed starting to talk about, hey, you know, we did have a soft landing, yada yada.
• 4:03
  SPEAKER_00: I'm not an economist, but I do pay attention to those things just from a personal standpoint and from a professional standpoint.
• 4:10
  SPEAKER_00: So um I think as it relates to back to the AI conversation, you are going to see a lot of investments, even more investments and money going into that.
• 4:20
  SPEAKER_00: But if the Fed is signaling maybe even a lowering of rates or at least a steadying of rates in 24, then I see some more investments in other areas coming about and some startups.
• 4:33
  SPEAKER_00: However, I also see a on the other side of that, a consolidation of vendors even more into these platforms.
• 4:45
  SPEAKER_00: It's already happening.
• 4:46
  SPEAKER_00: You're already seeing things like uh Talon get bought.
• 4:49
  SPEAKER_00: Well, one bite by Palo Alto, I've got a shirt on.
• 4:52
  SPEAKER_00: Um, and in a lot of those, and a lot of API security vendors are probably gonna get picked up if their valuations are right.
• 5:00
  SPEAKER_00: Um, so I do see some consolidation there happening, and it's something that is gonna affect security leadership and organizations as they think through their strategy in 2024, uh going into 2025 of what their security stack looks like.
• 5:15
  SPEAKER_00: So those are my three things.
• 5:17
  SPEAKER_00: Um, AI, obvious regulations, pretty obvious, a lot of activity happening there, and then just uh economy and how that affects vendor consolidation and startups going into 2024.
• 5:29
  SPEAKER_00: So uh let me know what you think about that list, see if there's anything else that you would add.
• 5:34
  SPEAKER_00: I know there's a lot more to it, but uh, you know, I don't have a whole lot of time to talk about it on here.
• 5:38
  SPEAKER_00: So just wanted to put that out there.
• 5:39
  SPEAKER_00: Let me know what you think.
• 5:41
  SPEAKER_00: Happy New Year.
• 5:42
  SPEAKER_00: Talk to you next time.