The theme of the RSA Conference earlier this month was “the art of possible.” Hugh Thompson, executive chairman of RSAC and program committee chair, provided a keynote that emphasized the power of the infosec community working together to minimize risk – and the need to reduce employee burnout.
Of course, artificial intelligence, including generative AI, was a big topic of the conference. We saw vendors present their takes on enabling secure use of AI, applying AI to their products, and ways to keep the AI advantage on the side of defenders. But Thompson put it in context of bolstering security team effectiveness and addressing security team burnout, calling out the importance of working with the massive potential in AI while safeguarding against its abuses.
The theme, sessions, and conversations grounded the AI hype by emphasizing how to meet current challenges to support scale and growth for digital transformation, including the coming wave of AI and GenAI use. But perhaps most importantly, the conference strived to inspire cybersecurity professionals to keep up the good fight and bolster security effectiveness to stay ahead of attackers.
The importance of cybersecurity
The conference featured keynotes by leading U.S. officials; Secretary of State Antony J. Blinken, as well as U.S. Homeland Security Secretary Alejandro Mayorkas.
“Today’s revolutions in technology are at the heart of our competition with geopolitical rivals. They pose a real test to our security,” said Blinken, who announced the release of the United States International Cyberspace and Digital Policy Strategy, describing the role of the U.S. government in “shaping the rules of the road to ensure that foundational technologies sustain our democratic values and guard against harms.”
Mayorkas addressed the coming wave of AI, discussing how government agencies will apply AI to help staff work more efficiently, such as for processing applications for citizenship, but he also talked about protecting against threats to civil liberties.
RSAC keynotes also brought celebrities. Matthew Broderick gave us a glimpse behind the scenes of the 1983 sci-fi movie “War Games” and the excitement that may have driven many of us into the field; a teenage hacker who can gain access to his school’s computer to change his grades, which later triggers a global nuclear conflict. Broderick described how it garnered attention from then President Ronald Reagan to set up information security policies and protocols.
Another keynote featured Jason Sudeikis to address the power of the community, teamwork, collaboration, as well as the importance of mental health, positivity and kindness. This was important because cybersecurity professionals are burned out.
The burnout and stress are real
The conference highlighted the crucial role of cybersecurity for business success and for safeguarding our personal lives, but how are cybersecurity professionals doing? My colleague Jon Oltsik, analyst emeritus for Enterprise Strategy Group, along with Curtis Campbell, Information Systems Security Association (ISSA) director, and Shawn Murray, ISSA president held a session revealing the findings from our sixth annual information security professional study.
In the survey, 65% of respondents said they believe it is more difficult to work as a cybersecurity professional than two years ago and 55% believe their job is stressful at least half the time. When asked about the stressful aspects, respondents cited overwhelming workloads (31%), working with disinterested business managers (29%), finding out about IT initiatives that were started by other teams without security oversight (29%), constant emergencies and disruptions taking them away from primary tasks (25%), and keeping up with the security needs of new IT initiatives (24%).
Some other worrisome stats:
- 65% of organizations have been impacted by the security skills shortage. The impacts include increased staff workloads, inability to optimize security tech, and staff burnout;
- 37% of respondents say the skills shortage has gotten worse over the past two years;
- 84% of respondents say it is extremely difficult, difficult, or somewhat difficult to recruit and hire cybersecurity professionals at their organizations.
The most acute skills shortage areas include emerging technologies (AI), cloud security, application security, and security analysis/investigations.
As one of the world’s top cybersecurity conferences, RSAC needed to address this, focusing on the value of our industry and cybersecurity professionals, collaborating with security vendors to provide effective solutions.
GenAI in security
It is very exciting to think of a world where if you have an idea for a product or service or a difficult task to complete, AI holds the promise of removing the toil, complexity, and time it would take you to build it or do it.
However, you never want to get too excited about technology, adopt it without thinking about security, and then face terrible consequences of an attack or breach. While organizations are excited to leverage GenAI for its benefits, they already struggle with issues like data security, including understanding and protecting sensitive data, API security, and permissions and access, which are scaling rapidly are difficult to secure. GenAI will only compound these challenges.
My colleague Dave Gruber, principal analyst for Enterprise Strategy Group, presented in an RSAC session on the challenges and opportunities for GenAI on cybersecurity, sharing results from new research. We can expect attackers to leverage GenAI to help them more easily launch attacks at a wider scale. He provided insight on how to keep the advantage on the defenders’ side. Organizations should look for solutions to help them apply GenAI to improve security team productivity, accelerate threat detection, automate remediation actions, and guide incident response.
However, it is important to be realistic about what it can and can’t do. There is a lot of hype around applications for GenAI, as well as concern that it could replace human jobs. The word “pragmatic” came up quite a bit during the conference. We should use it for assistance to automate manual, tedious tasks. This has long been the goal for security vendor products, so this is where vendors can help the industry with the right product capabilities to support them in their jobs.
Product evolutions must drive efficiency
As mentioned earlier, security teams are stressed, facing increased pressure and skills shortages in areas mentioned earlier. While companies undergo digital transformations to increase productivity, security teams need the right tools and processes in place that can help them scale to support growth.
This is challenging as we see increasing attack surfaces across so many rapidly scaling elements, including the number of applications, workloads, assets, code components, data transfer, access points and related permissions, and APIs.
I’ve blogged before about the challenges of acronym and category sprawl, and at RSAC, conversations with vendors and attendees reinforced the need to focus on solving problems. Our research shows the conflict with organizations seeking consolidation and integrations, as well as tools to address these different, rapidly scaling elements.
This is challenging for vendors and customers. Customers have set budgets, but need to apply their investments in ways that have the highest impact in mitigating risk and being able to quickly respond to threats and attacks. Organizations simply can’t afford to buy products across every category; they need to think about what drives the most efficiency for their teams to effectively do their jobs.
We also see consolidation with larger security vendors buying startups to fill out their portfolios for what they can offer to their customers. However, this complicates things for customers using acquired point products, as they may also be using products from the larger vendors’ competitors.
While vendors strive to be the best, they need to focus on serving customers and meeting their needs for efficiency and ROI. Unfortunately for cybersecurity professionals, it also means not always being able to use the best tools. It takes us back to that word “pragmatic” and ties us to the conference theme of what is actually possible.
So, while RSAC was a big show for security products and there was a lot of excitement about AI, let’s keep our eye on results for our people and setting teams up for success.
Melinda Marks is a senior analyst at TechTarget’s Enterprise Strategy Group, where she covers cloud and application security.
Enterprise Strategy Group analysts have business relationships with technology vendors.
Source link
#RSAC #Infosec #pros #battle #stay #ahead #bad #guys
Unlock the potential of cutting-edge AI solutions with our comprehensive offerings. As a leading provider in the AI landscape, we harness the power of artificial intelligence to revolutionize industries. From machine learning and data analytics to natural language processing and computer vision, our AI solutions are designed to enhance efficiency and drive innovation. Explore the limitless possibilities of AI-driven insights and automation that propel your business forward. With a commitment to staying at the forefront of the rapidly evolving AI market, we deliver tailored solutions that meet your specific needs. Join us on the forefront of technological advancement, and let AI redefine the way you operate and succeed in a competitive landscape. Embrace the future with AI excellence, where possibilities are limitless, and competition is surpassed.