With growing anti-social behaviour, staff shortages, increasing regulations as well as continued difficult traditions conditions, 2024 promises to be another challenging year for the fire and security industries.
One of the big changes we are seeing in cybersecurity since the war in the Ukraine is the emergence of state-funded Russian gangs who have been breaking into western businesses.
Rather than attacking these companies straight away, however, they are playing a long game, remaining quiet for several years before the malware is deployed. Some of this malware even has polymorphic features which means the code changes over time to avoid detection.
What’s also happening is that ransomware attacks are becoming more sophisticated. For example, hackers are blackmailing companies which have been breached to pay them within a period of time or they will report the leak to government authorities such as the US’ SEC (Security and Exchange Commission) who will then fine them.
While AI is obviously playing a greater role within the cybersecurity industry the challenge here is that the bad guys always adopt technologies and use them far more effectively than we do because, as security people, we’re cautious about so many things. Typically, the hackers will find some uses for their malware, duplicate them and then roll them out to underground marketplaces.
Looking at 2024, we see pressure on CISOs (Chief Information Security Officers) continuing to mount with some even having been found criminally liable recently for their handling of cybersecurity incidents. Undoubtedly the role of the CISO is becoming more and more stressful which is why we have set up a foundation looking at mental health within the cybersecurity industry.
CISOs should in the future be playing a similar role to that of data protection officers so they advise the board on risk and it’s then up to the board to take the decision about whether they wan to take it or not.