Main risk trends for information security in 2020

Due to COVID-19, the attention of CISOs had to be reinforced to plan an efficient information security strategy, and to help in this task, Gartner has published a very interesting report, which pointed out some security trends and risks for information security in 2020.

According to Peter Firstbrook, VP Analyst at Gartner, “The pandemic and the resulting changes in the business world have accelerated the digitization of business processes, endpoint mobility, and the expansion of cloud computing in most organizations.”

As a result, many companies have revised their remote access policies and migrated to cloud systems, increasing productivity and information security risks. Check out the main trends that Gartner has listed:

XDR

Through XDR (External Data Representation) solutions, the detection of threats becomes faster and more accurate in emails, endpoints, servers, networks, etc.

Task Automation

Through automation tools, tasks that are performed repeatedly are done in a faster, scalable way, without errors and risks to a company’s information security.

It is recommended that this automation be done in repetitive tasks so that professionals focus on functions that demand more time and will have a greater impact on the company’s security.

Artificial Intelligence

Through the use of artificial intelligence in your company’s information security, it is possible to protect digital business systems, combine it with packaged security products to enhance security defense capabilities, and prevent the improper use of artificial intelligence by attackers.

Enterprise-level CSOs

With the significant increase in cyber-physical attacks, hiring CSOs is becoming a trend across companies.

In addition to adding to IT security, these professionals also work in OT security, physical security, supply chain security, product management security, etc. This significantly reduces the risks to information security.

Privacy

From the sanction of data protection laws such as LGPD and GDPR, data privacy has become an obligation to be followed, and this affects the entire corporation, which requires collaboration from all areas, such as IT, HR, legal, management, etc.

Digital Security and Trust

The importance of maintaining consumer security at points of contact has become an advantage for companies.

Having a team focused on the administration of all points of contact makes the exchange of information both secure and complete, regardless of the means of contact chosen by the customer, which reduces the risks to information security.

Zero-trust Network Access Technology

Access to environments through VPNs tends to decrease. Through Zero-trust Network Access (ZTNA), companies have greater control over remote access.

ZTNA only communicates with the ZTNA service provider and can only be accessed through the ZTNA provider’s cloud service, which avoids information security risks.