It is no longer just about protecting data and systems but also about protecting the bottom line of the organization,” said Stephanie Balaouras, Forrester vice president, group director.
With the increasing adoption of AI and generative AI, CISOs are faced with new challenges and opportunities to optimize their cybersecurity spending to make the most impact. Cloud infrastructure, data, and software are top priorities for CISO budgets in 2025, with data-related investments expected to have the most significant impact.
Forrester’s Pascal Matska emphasized the importance of investing in specific capabilities and platforms to run AI workloads effectively and efficiently. Cloud-native technologies such as Kubernetes and containers, along with modern data platforms, are crucial for driving out friction within different business silos.
Security and risk leaders are also anticipating significant changes in their budgets for cloud security, new security technology for on-premises use, and security awareness and training initiatives. Each of these areas is projected to see an increase of 10% or more in 2025 budgets.
Ultimately, protecting revenue is core to CISO accountability. Successful CISOs understand the importance of protecting revenue and are able to lead their teams to support and protect the organization’s financial well-being. By taking responsibility for revenue protection, CISOs can stand a chance of implementing the recommendations outlined in Forrester’s cybersecurity planning guide and advancing their careers in the ever-evolving landscape of cybersecurity.
Cybersecurity has become a top priority for businesses as they strive to protect their revenue and data from malicious attacks. Jeff Pollard, VP and principal analyst at Forrester, emphasized the importance of cybersecurity in driving revenue during his keynote at the Security and Risk Forum in 2022. He highlighted the need to prioritize budgeting for the weakest and most at-risk areas, including software supply chain security, API security, human risk management, and IoT/OT threat detection.
Software supply chains have become a prime target for cyberattacks, with a staggering 91% of enterprises falling victim to security incidents in just a year. This underscores the critical need for better safeguards for continuous integration/continuous deployment (CI/CD) pipelines. Threat vectors such as open-source libraries, third-party development tools, and legacy APIs pose significant risks to software supply chains and APIs, making them more vulnerable to attacks. High-profile incidents like the Log4j vulnerability have prompted increased investment in software supply chain security.
To combat these evolving threats, CISOs are advised to invest in new technologies in four key areas. Exposure management and cyber risk quantification play a crucial role in identifying vulnerabilities and managing attack surfaces in the face of AI-based apps, devops, cloud, and IoT expansions. Post-quantum security and crypto agility are essential to prepare for the threat of quantum computers breaking current encryption standards. Security data lakes offer a cost-effective solution for storing security data, while AI and ML security provide advanced threat detection capabilities.
Looking ahead to 2025, CIOs and CISOs need to collaborate closely to deliver ROI and enhance the organization’s security posture. Bob Grazioli, CIO at Ivanti, emphasized the importance of aligning resources, budgets, personnel, data, and technology to improve security. By breaking down data silos between departments and leveraging AI-driven insights, C-suite executives can gain a holistic view of the organization’s risk landscape and make informed decisions to protect against cyber threats.
In conclusion, cybersecurity remains a top priority for businesses, with investments in new technologies and collaborative efforts between CIOs and CISOs essential for safeguarding revenue and data in an increasingly digital world. By staying ahead of emerging threats and adopting proactive cybersecurity measures, organizations can mitigate risks and protect their bottom line. The world is currently facing an unprecedented crisis with the ongoing COVID-19 pandemic. The virus, which was first identified in Wuhan, China in December 2019, has spread rapidly across the globe, infecting millions of people and causing widespread disruption to daily life.
Governments around the world have implemented various measures to try and contain the spread of the virus, including lockdowns, social distancing guidelines, and travel restrictions. These measures have had a significant impact on economies, with many businesses forced to close and millions of people losing their jobs.
One of the most challenging aspects of the pandemic has been the strain it has put on healthcare systems. Hospitals have been overwhelmed with patients, and healthcare workers have been working tirelessly to care for those who are sick. There have been shortages of essential medical supplies, such as personal protective equipment, ventilators, and testing kits, further complicating the situation.
In addition to the physical health impact of the virus, the pandemic has also taken a toll on mental health. The isolation and uncertainty of the situation have caused increased levels of anxiety, depression, and stress for many people. The lack of social interaction and disruption to daily routines have made it difficult for people to cope with the challenges of the pandemic.
Despite the many challenges posed by the COVID-19 pandemic, there have also been moments of resilience and hope. Communities have come together to support one another, healthcare workers have shown incredible dedication and bravery, and scientists have worked tirelessly to develop vaccines and treatments for the virus.
As vaccines are rolled out and restrictions begin to ease, there is hope that the worst of the pandemic may soon be behind us. However, it is clear that the long-term effects of the crisis will be felt for years to come. It will be important for governments, healthcare systems, and individuals to continue to work together to rebuild and recover from the impact of the pandemic.
In conclusion, the COVID-19 pandemic has been a global crisis unlike any other in recent memory. It has tested our resilience, our compassion, and our ability to adapt to rapidly changing circumstances. As we move forward, it will be important for us to learn from the challenges of the past year and to work together to build a more resilient and prepared world for the future.