31 CISOs share their security priorities and forecasts for 2023

Check out the on-demand sessions from the Low-Code/No-Code Summit to learn how to successfully innovate and gain efficiencies by improving and scaling citizen developers. Watch now.

2022 has been a pivotal year in the cyber threat landscape. With the Russian-Ukrainian war encouraging nation-state hackers and professional cybercriminals, organizations are under increasing pressure to optimize their security operations just to keep up.

Securing the software supply chain and open source software ecosystem, implementing zero trust, and educating employees about the risks of social engineering and phishing attempts does not are just a few of the areas that CISOs assess to mitigate potential risks.

VentureBeat recently asked CISOs from some of the world's largest organizations to outline their security priorities and predictions for 2023. Below are their responses (edited for length and style):

Phil Venables, Google Cloud Malicious behavior will get worse before it gets better, and investments in technology infrastructure will increase accordingly.

The federal government's focus on protecting the nation's technical infrastructure from malicious activity will increase in 2023. In the coming year, I expect to see the Biden administration implement a coherent flow of policies following the Executive Order of 2021 on improving the country's cybersecurity and the National Order of 2022. Security Memorandum.

Event

Smart Security Summit

Learn about the essential role of AI and ML in cybersecurity and industry-specific case studies on December 8. Sign up for your free pass today.

Register now

While collaboration between the public and private sectors has recently grown, there needs to be deeper coordination between Big Tech agencies and organizations. It is reasonable to expect the government to implement more secure checkpoints between Big Tech agencies and organizations.

It is reasonable to expect the government to introduce more secure checkpoints for organizations to reflect on their progress in meeting regulatory requirements. As they are implemented, we can expect to see increased knowledge sharing between public and private organizations, increasing transparency and protection against today's greatest threats.

Malicious behavior will get worse before it gets better, and investments in technology infrastructure will increase accordingly. The increase in malicious activity we've seen in 2022 is no surprise - and will only continue to grow in 2023. My long-term outlook is optimistic, but pessimistic in the short term, and I expect that organizational approaches in the coming year will continue to be more cautious, especially as public and private organizations continue to seek to contain the growing number of cyber threats.

In 2023, we can expect increased investment in IT modernization, especially as malicious activity continues to grow in sophistication. With a modernized IT environment, security will become a "built-in" part of the infrastructure instead of an "add-on", so even with short-term challenges, the long-term benefits of IT modernization are paramount and critical to mitigating the 'evolution. cyber threats.

CJ Moses, AWS

AWS builds security services by working backwards from customer issues, and we see a common thread among our customers: that security starts not just with using the best security tools, but also with construction...