The Three Invisible Cybersecurity Hotspots Today’s CISOs Are Watching

Today’s CISOs face a perfect storm. Cyberattacks are on the rise every year, and new technologies like AI are giving attackers power. Meanwhile, the amount of data CISOs are defending is growing.

The ever-adapting threat landscape requires CISOs to continually evolve their approach to cybersecurity. Last year alone, 85% of UK IT and security leaders reported experiencing a significant cyberattack, and 36% of victims experienced at least one ransomware attack.

Given these significant threats, chief information security officers (CISOs) must develop and implement a cyber strategy that focuses on data resilience and recovery, regardless of where the data resides.

Richard Cassidy

Sensitive Cloud Architectures

As data volumes and the number of devices requiring access to that data have skyrocketed, many businesses are increasingly dependent on the cloud. To put this growth in perspective, in 2023, 13% of the typical organization’s data was stored in a cloud architecture, compared to just 9% in 2022. In comparison, on-premises dropped from 77% in 2022 to 70% in 2023.

This is a problem because attackers are also taking notice of these trends, and hybrid environments have become a real focus for cyberattacks as a result. Many organizations that suffered a cyberattack last year were targeted across multiple touchpoints, such as cloud and SaaS.

In simple terms, cloud computing comes with inherent risks because it stores regulated data with less security capabilities and less visibility than on-premises resources. So, while the benefits of cloud storage cannot be disputed, mismanagement of cloud architectures still creates security blind spots:

1. 70% of all data in a typical cloud is object storage, which is a common problem for most security appliances because it is typically not machine-readable.

2. Unstructured data (such as text files) and semi-structured data present another security blind spot because these data types differ significantly in their machine-readability.

3. More than 25% of object stores contain data subject to regulatory or legal requirements, such as protected health information (PHI) and personally identifiable information (PII).

CISOs must address these security blind spots in their cloud architecture if they are to manage the impact of cyberattacks. A solid cloud security framework helps organizations maintain data integrity, continually monitor risks and threats, and recover from an attack on infrastructure.

The most vulnerable sectors

While cyberattacks are common across most industries, some sectors are at greater risk than others, such as healthcare, which continues to be a prime target for ransomware groups.

Healthcare organizations have secured 22% more data than the global average, and that number is only expected to grow. In fact, the typical healthcare organization saw its data assets grow by 27% last year, leaving CISOs with the daunting task of discovering and re-secured all of that data.

Worryingly, the healthcare sector not only has more sensitive data than the typical organization, which is highly coveted by cybercriminals, but any cyberattack against them is also more damaging. It is estimated that 20% of the typical healthcare organization’s total sensitive data assets are at risk each time a successful ransomware attack occurs, compared to 6% for the average organization. This means that one-fifth of a healthcare organization’s sensitive data is at risk during a ransomware attack, posing a significant threat to their operational resilience, business continuity, and the potential loss of highly personal patient records.

These numbers are particularly significant, but the truth is that any organization that frequently handles sensitive data is at risk of a ransomware attack. By understanding the blind spots that need to be addressed to keep data safe from attackers, CISOs can be better prepared for the future and ensure a better approach to cyber resilience within their organizations.

Budget and personnel pressure

While CISOs are being asked to do more in every part of their role – including protecting more data – one element has remained largely unchanged: budget.

Having to deliver more with the same resources, it’s clear that these increasing pressures are having a negative impact on mental health. It’s clear that 96% of senior IT and security leaders reported changes to their emotional and/or mental health as a direct result of a cyberattack, with 38% worried about job security.

Organisations must work to manage the human costs of a security breach to ensure staff are prepared to meet the increased demands that come with an attack.

Delayed immune response

It’s an uncomfortable reality that cyberattacks are becoming increasingly inevitable. But it’s a reality. That’s why cybersecurity professionals must adopt a cyber-resilient posture and prepare to recover from an attack, not just defend against it.

Until recently, prioritizing cyber resilience has taken a back seat – but regulations are coming into play to support the prioritization of cyber resilience. The Digital Operational Resilience Act, or DORA, is an EU measure that will come into effect in early 2025. It will provide a single set of requirements for the security of the networks and information systems of companies and organizations operating in the financial sector, as well as third parties that provide them with ICT-related services.

Similarly, the new NIS2 directive – an update to the Security of Networks & Information Systems Regulations – was introduced in 2023. It applies to businesses working with key EU and UK organisations. NIS2 enforces collaboration to encourage a culture of strong security.

By closing existing vulnerabilities, CISOs can ensure data integrity, mitigate the effects of attacks, and ensure business continuity in uncertain times.

Because the only storm you can prepare for is the one you see coming.

We present the best malware removal programs.

This article is part of TechRadarPro’s Expert Insights channel, where we showcase the best and brightest minds in the technology industry. The views expressed in this article are the author’s own and not necessarily those of TechRadarPro or Future plc. If you would like to contribute, find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro