Holistic approach needed to improve cyber readiness

Darktrace is publicising a new IDC InfoBrief, sponsored by Darktrace,‘Building the Case for a Virtuous Cycle in Cybersecurity’. The research was conducted to identify the key challenges facing cybersecurity professionals operating in increasingly noisy cyber security environments, and the report outlines recommended solutions to bolster cyber readiness.

IDC conducted a survey of 300 organisations across the U.S. and Europe spanning multiple verticals including financial services, transportation, and healthcare. The data revealed the key challenges facing most of these organisations concern the ability to effectively prioritise and contextualise the large amounts of data organisations get from several cyber security alert systems, as well as identifying the key actions necessary for effective mitigation of threats and vulnerabilities.

The study’s key findings are:

1. Evolving attack vectors make it difficult to prepare proactively, with only 31% of respondents highly confident that their tools can continuously adjust to new configurations

2. There is a lack of dynamic testing capabilities, as 65% of participants agreed that pen testing provides only a snapshot in time which is of limited value, as it quickly becomes out of date

3. While 76% of surveyed professionals thought visualizing attack paths was of moderate or high importance, only 29% were highly confident they had a robust mechanism to test their environments against the most current threat vectors

4. The number of organizations that can continuously run preventative exercises such as pen tests and attack surface evaluation is between just 24% and 31% across all sectors

The IDC InfoBrief calls for the adoption of a ‘virtuous cycle’ model as a way of closing these critical security gaps, incorporating prevention, detection, response, and healing. It calls for “a multipronged approach that includes establishing a security posture and proactively managing the access and assets, monitoring what is happening in the environment, and ensuring a fit-for-purpose remediation approach including backup and disaster recovery.” The study also highlights AI as the solution for improved detection and response capabilities and continuous monitoring, as well as playing an integral part in the ‘virtuous cycle’, citing AI’s ability to look for subtle changes in the behaviors of entities within a network.

“It’s clear from this study that organisations need to adopt a holistic approach to improve their readiness,” commented Christopher Kissel, Research Vice President of IDC's Security & Trust Products. “The solution is to create a virtuous cycle, leveraging AI to create an ecosystem across an entire organization able to continuously stress-test environments, give an instantaneous response, and determine if remediation is working.”

“Security teams don’t need more data, they need clear prioritisation, and intelligent automation to lighten the load and this report sets that out in concrete terms,” said John Allen, VP of Cyber Risk and Compliance at Darktrace. “Security professionals are overwhelmed with vulnerabilities, and they can’t get to them all in time. At Darktrace we’re committed to delivering an AI Loop that can provide continuous visibility, prioritised into meaningful actions for security teams, and harden weak points. That’s how we’re helping security teams get proactive.”

Darktrace PREVENT™ is the third of four product families in Darktrace’s Cyber AI Loop™ which also includes Darktrace DETECT and RESPOND™. The final part of Darktrace’s Cyber AI Loop, Darktrace HEAL™, will go to market in 2023.

Commenting on the efficacy of PREVENT and its ability to augment an entire security ecosystem, Jim Webber, Vice President of Information Technology at Direct Federal Credit Union, said: “PREVENT is continuously looking for assets that live outside of our internal IT environment. With PREVENT constantly doing vulnerability testing on our behalf, I don’t need worry about missing something - that is very reassuring.”