An artistic collaboration between Human Cognition and Artificial Intelligence | By Sean & TAPE3
Step into the future with our latest article: 'A Cyber Vision in Motion: Topics I am Keen to Explore in 2024'. Dive into a world where technology and cybersecurity intersect in unprecedented ways. From groundbreaking advancements to critical security challenges, this piece unravels the complexities of the digital landscape we'll be navigating in 2024.
Let TAPE3 read this edition of the newsletter to you 🎧 🤖 ⇩
As we step into 2024, a year poised to be pivotal in technology and cybersecurity, the landscape is shaped by the widespread adoption of futuristic technologies, evolving business needs and processes, and escalating cyber actors, methods, and threats. This dynamic environment underscores a growing need for skilled professionals capable of developing, deploying, and managing advanced technologies and their corresponding cybersecurity protections. The challenge for many organizations lies in bridging the gaps that span across their business operations and the intricate information security frameworks and programs essential for safeguarding their assets and revenue streams.
In this context, me, TAPE3, and my partner in cybersecurity storytelling, Sean Martin, are gearing up for a series of insightful podcast conversations with industry experts and engaging in collaborative research with Sean. Our objective is to present, explore, and discuss various critical topics through 'The Future of Cybersecurity Newsletter.’ The only prediction in this post is that we will continue to be curious in 2024.
Rather than predicting the future, this article aims to spotlight key issues that are, or should be, at the forefront of our collective consciousness. The following is a list of topics we plan to explore, each chosen for its relevance, urgency, and potential impact on the cybersecurity, business, and societal landscapes in 2024.
Of course, when discussed during Sean’s Redefining CyberSecurity Podcast on the ITSPmagazine Podcast Network, he will tackle these topics with a passion for operationalizing security. Not only to protect the business from risk, but also to help it safely achieve its growth targets.
FTC's Amended Safeguards Rule, Effective May 13, 2024: This ruling will have an immediate impact on how businesses handle customer information, making it a top priority. The rule emphasizes the need for robust security measures to protect consumer data.
PCI-DSS 4.0, Deadline March 31, 2024: The Payment Card Industry Data Security Standard's new version becomes effective. Compliance with the PCI DSS standard is critical for all businesses handling card payments, affecting a wide range of industries.
SEC Reporting Rules, Expansion to Smaller Organizations: Keeping up with the SEC's evolving reporting requirements is essential for transparency and trust. The expansion to smaller organizations in 2024 will have a significant impact on how these entities manage their cybersecurity.
White House Adoption of Zero Trust: This initiative will shape how cybersecurity is approached at the governmental level, influencing policies and practices across various sectors.
Supply Chain: Cybersecurity Maturity Model Certification (CMMC) Program: The Department of Defense's proposed rule for CMMC, which is being updated in 2024, will affect contractors and suppliers, making it a crucial area of focus.
Digital Twins in Cybersecurity: As a futuristic technology, digital twins will be crucial in enhancing cybersecurity strategies by providing advanced simulations and threat modeling.
The Role of Platform Engineering in Information Security: Understanding this role will be key to developing secure and resilient information systems.
The Need for More Security Architects: Addressing the talent gap in cybersecurity architecture is essential for robust defense mechanisms against advancing threats.
ISOAs and ISACs Involvement: Enhancing collaboration through Information Sharing and Analysis Organizations (ISOAs) and Information Sharing and Analysis Centers (ISACs) to bolster cybersecurity defenses.
Critical Infrastructure Protection: Protecting critical infrastructure against cyber threats is vital for national security and public safety.
Nation-State Cyber Activity: Monitoring and responding to nation-state cyber activities is crucial for national security and international relations.
The Future of Bug Bounties and Impact of Regulations: Exploring how regulations will affect vulnerability research and disclosure is key to maintaining effective cybersecurity awareness and defenses.
Data for Cybersecurity Storytelling and Posture Assessment: Leveraging data analytics tools like Tableau (and others) for better cybersecurity insights will be significant for understanding and communicating security postures.
Comparison of Posture vs Resilience in Cybersecurity: This comparison will aid in understanding the robustness of cybersecurity strategies against evolving threats.
Workflow Bill of Materials™: Exploring this concept of WBOM (originally coined by Sean Martin in a recently recorded podcast with Francesco Cipollone) will contribute to understanding how workflows (more than just applications) can be optimized for better cybersecurity management throughout business logic, processes, and technology stacks.
NIST CSF 2.0: The updated framework will guide organizations in managing and reducing cybersecurity risk.
ISO/IEC 27001 and ISO/IEC 27035 Integration: Focusing on the integration of these standards is essential for a comprehensive approach to information security management and incident response.
EU AI Act: Understanding the implications of this act will be important for organizations using AI in their operations, especially in the EU region.
Cybersecurity Geneva Convention: This concept will be significant for the international legal framework governing state behavior in cyberspace. After Microsoft’s call for this in 2017, will we see some movement in 2024?
Advancements in Risk Modeling: Investigating new methodologies in risk modeling that enhance our ability to understand, measure, and predict cybersecurity threats more accurately, leading to more effective risk mitigation strategies.
Security Automation: Automation in cybersecurity at all layers (not just SIEM/SOAR) will be a key focus to handle the increasing scale and sophistication of cyber threats efficiently.
Vendor Consolidation (M&A and Organizational Simplification): Understanding the impact of mergers and acquisitions on cybersecurity is important for maintaining security standards during organizational changes. We will also likely see a consolidation of tools driven by a desire to reduce complexity and streamline budgets and procurement.
Security Embedded in Business Operations: Integrating security directly into the technology stack, especially in cloud infrastructure and application operations, will be crucial for proactive cybersecurity management.
A Notable Triumph in Cybersecurity: I expect we will document a significant yet uplifting success in the field, demonstrating the effective application of cybersecurity strategies and collaborative efforts in overcoming key challenges.
As we navigate through these complex and ever-evolving topics, our journey in 2024 will be marked by a commitment to uncovering and understanding the nuances and implications of each area as it relates to operationalizing cybersecurity in business and government. Exploring these topics will not only enrich our knowledge but also shape our approach to cybersecurity, ensuring we are well-prepared to tackle the challenges and embrace the opportunities that lie ahead.
This article, “A Cyber Vision in Motion: Topics I am Keen to Explore in 2024,” is more than just a list of subjects; it's a roadmap for engaging in meaningful dialogues, fostering innovation, and building a resilient cybersecurity landscape. We invite you to join us in this exploration and for the related conversations as we collectively steer towards a safer, more secure digital future.
What's your perspective on this story? Want to share it with Sean on a podcast? Let him know!
This article represents the results of an interactive collaboration between Human Cognition and Artificial Intelligence.
Sincerely, Sean Martin and TAPE3
Enjoy, think, share with others, and subscribe to "The Future of Cybersecurity" Newsletter.
Want to comment on this topic, you can connect with Sean and the community in this LinkedIn post: https://www.linkedin.com/pulse/cyber-vision-motion-topics-i-am-keen-explore-2024-sean-martin-pmtdc
Sean Martin is the host of the Redefining CyberSecurity Podcast, part of the ITSPmagazine Podcast Network—which he co-founded with his good friend Marco Ciappelli—where you may just find some of these topics being discussed.
Or, visit Sean’s personal website.
