Industry executives and experts share their predictions for 2024. Read them in this 16th annual VMblog.com series exclusive.
Four Predictions for Security Professionals in 2024
By Trinity Davis, senior vice president of strategic engagement, and Tom Aldrich, vice president of private clients, 360 Privacy
How will AI shape the coming year for the security industry? Which security tools and tactics won’t work anymore? Well, predictions don’t always come with solutions. That is, they are often predictive but not prescriptive. The point, though, is to understand what’s coming down the pike so that you can start preparing now. You can write your own prescription once you know what the ailment is. So, let’s take a look at how several aspects of the cybersecurity profession will be affected by what’s ahead.
Prediction #1: Mass notification, incident management and intelligence platforms will consolidate
Security point solutions are rapidly becoming a thing of the past. With a broad gambit of threats to be aware of, especially with the emergence of AI, there will be greater demand for platforms that can serve as a catch-all for risk management – with a preference to also include data governance and other risk management features. Coinciding with this, integration into existing systems will be an inflection point for consumers when selecting which vendor to partner with. As security budgets increase, vendors will need to be a “one-stop-shop” across the board to continue to grow in this marketspace.
Prediction #2: CSOs will have their moment in the spotlight
Over the last few years, we’ve seen an uptick in how much weight security carries in organizations’ overall risk management budget. In 2024 and onward, I predict this trend will continue and grow even more quickly. Threat actors are finding ways to infiltrate nearly every aspect of an organization, so integration with cybersecurity/infosecurity, enterprise risk security management, protective intelligence, legal and finance will be essential – the best defensive positioning possible. This will underscore the CSO’s importance and give this role a place in the boardroom if it isn’t there already.
Prediction #3: AI cybercrime will spike demand for security professionals with AI experience
While the cybersecurity skills gap is being felt at almost every level already, there will be increased demand for security teams with AI expertise. As threat actors embrace the rapidly changing AI landscape, defenders must also leverage these technologies to stay on top. AI operates at speeds unmatched by traditional cybersecurity protocols; things are only going to speed up, and at an exponential rate. Consequently, there will be more competition for security professionals who can manage, interpret and act on insights provided by AI.
Prediction #4: There will be a greater emphasis on training for security professionals and key personnel
With the proliferation of attacks targeting humans in the loop, such as social engineering or phishing attacks, 2024 will bring an increased focus on training for security professionals and key personnel alike. Organizations must think of innovative ways to engage personnel to truly get the most out of these kinds of trainings during busy work schedules. Tabletop exercises, in-person and virtual seminars, and even virtual reality will be paramount to preparing employees to defend against near-undetectable attacks using advanced AI technology. A quarterly memo on password best practices will no longer suffice in today’s digital landscape.
Preparing for change
Working in security is anything but boring. Change is a constant that can yield dangerous consequences if it’s ignored or not taken seriously. As the AI juggernaut gains momentum, organizations will need to marshal their forces by finding security pros with AI experience, upskilling current employees, and investing in AI-powered solutions and systems to counteract the advanced efforts of cybercriminals. The CSO role will continue to rise in stature, and cybersecurity professionals will continue to lead the defense against whatever’s next.
##
ABOUT THE AUTHORS
Tom Aldrich
Tom joined 360 Privacy as a Partner after having worked at Goldman Sachs as a private wealth advisor. He came to Goldman from the US Army, where he served as a Green Beret and functioned as both a communications and intelligence subject matter expert. He deployed overseas four times, where he was responsible for tactical and strategic targeting, intelligence, and digital exploitation. Tom is a Certified Ethical Hacker and obtained his CIPP/US Certification from the International Association of Privacy Professionals.
Trinity Davis
Trinity Davis spent 18 years in Protective Services, focused in the UHNW Private Family Office & Tech Sector. He built and led cross-functional teams in Executive Protection, Residential Security, Travel Security Management, & Protective Intelligence; with the last 6 years being spent in Silicon Valley working in social media and FinTech. He transitioned to 360 Privacy in 2022 to focus on educating the industry on Digital Executive Protection, and how physical threats begin in the digital landscape.
