Intelligent CISO Issue 17 | Page 69

decrypting myths and deploying personally tailored phishing emails. Advancing threats don’t just come from cybercriminals looking to steal company data. Organisations are also at risk of becoming collateral damage from associated cyberwarfare between nation states, such as the 2017 Russian cyberattack on Ukraine with its fallout affecting hundreds of organisations across 64 countries. As a result, we need greater assurances that our cybersecurity can stand up to morphing threats. The future of AI-based cybersecurity AI deployment is well ahead of other avenues in terms of protection. If you haven’t invested yet, this won’t necessarily leave you wide open to threat. are done and eliminating daily updates which lose productivity. The CISO’s quality of job role is improved, leaving them free to focus on tasks that require human intelligence. Security shouldn’t be in your face; it should be business as usual. AI provides an improved level of efficiency, but people can’t abdicate responsibility entirely to AI. To be effective, AI needs to directly support a clear cybersecurity strategy and be part of an integrated approach to risk if we are to move to a mature cybersecurity operation. At its optimum level, it will be a very powerful tool, but we’re not there yet. www.intelligentciso.com | Issue 17 Myth four: Investing in AI-based security will instantly make me un-hackable It’s important to realise that AI can be the solution but it can also be the threat. As the technology advances for protection, cybercriminals will use it to find vulnerabilities. Hacking-as-a-service will advance, widening the pool of cybercriminals with access to hacking tools which will increasingly deploy AI. There is also the element of human error which is more difficult to prevent as attacks get increasingly sophisticated by targeting our connected devices What we have to look forward to is proper integration of end-to-end enterprise-based AI solutions that will take us forward from where we are now. As it advances, it will reduce false positives through better quality of data and provide better contextualisation of threat protection to the operating environment and uniqueness of what individual organisations do. The AI system will learn with the organisation and will have to adapt to the multiple ways that we connect, hopping from one network to another through interconnectivity. This will also advance beyond our work-based environment into our wider connected world. AI needs to adapt and we must be ready to stay ahead of the curve if we are to survive the widening security risks. u 69