Three quick predictions for the cyber-/information-security landscape in 2024
By Espen Otterstad
As we have entered a new year, I will make three quick predictions for the cyber-/information-security landscape in 2024.
Generative AI with large language models will continue to make it more difficult for employees to protect the organization and themselves from fraud attempts. The classical “red flags” for a phishing email will be significantly reduced, and the volume of “well-crafted” phishing attempts will continue to increase.
The cyber and information security field will continue to be led by technologists. This will lead to a continued lack of focus on the human element and the untapped potential of well-trained employees. From history, we know that technology and humans will occasionally fail, and we need to build more robust defenses where we utilize both humans and technology as one.
Our focus on measuring everything will continue; new dashboards with numbers and fancy graphs will pop up in more and more tools. Unfortunately, we will still have enormous gaps in our overall understanding of our organization’s security posture since we look at all these data points in isolation. We need tools that give us actionable recommendations based on current risks, ongoing events and observed human behavior. This far exceeds what centralized logging and SIEM tools can provide today.