Intelligent CISO Issue 23 | Page 69

decrypting myths Beyond kicking the tires to ensure everything is functioning properly, programs have been used as valuable training approaches and to demonstrate system capabilities and processes to stakeholders. Harkins noted that this brings the shortage of cybersecurity professionals to mind. While pen testing is expensive in resources and limited in scope, attack simulation technology looks much more appealing for high yields and low cost. Security leaders who can reduce manual labour costs and cover more ground using automation will free up time for more valuable development cycles. 4. Hyperconvergence of technologies will increase risk of microbreaches 3. Attack simulation will grow as pen testing becomes table stakes Microbreaches are slight manipulations of data that can cascade throughout distributed IT environments. Given the market consolidation that’s underway in the security solution space, CR Think Tank members believe these kinds of attacks will emerge more pervasively throughout the year. Beyond the ecosystem complexity and lack of integration, these attacks will be enabled by mobility and other emerging technologies that have created new points of entry. When it comes to building defences against attackers, what worked in previous years will no longer be sufficient this year. Traditional pen testing has been considered a key pillar of good cybersecurity because it forces leaders and analysts to proactively push the boundaries of what they’re doing, continuously validating the tools and alerting inside security environments. Peter Tran, Head of Global Cyber Defense at Worldpay, believes microbreaches will be off the radar because the current tools and telemetry enterprises deploy are designed to monitor and alert on the environment, such as SIEMs, packet capture, netflows, etc. – and they won’t be enough to combat microbreaches in a distributed IT world. u and programmatic cross-organisational collaboration, but when done right, the acquiring company and combined entity become stronger, delivering a better solution for customers.” Christina Van Houten, Chief Strategy Officer at Mimecast ‘softer side’ of M&A is a hugely important part of the due diligence process in the days following the acquisition. This requires a great deal of thoughtfulness www.intelligentciso.com | Issue 23 69