| | NOVEMBER - 2019ENTERPRISE SECURITY8IN MY OPINIONhere's a consistent theme in enterprise technology over the past year or tworapid and dramatic change, both in the rise of the "digital enterprise" and the need for IT to react quickly and innovate aggressively to meet business expectations for the pace of digitization. However, as IT organizations seek to support their business partners' digital aspirations, they will create challenges for many cybersecurity organizations. In order to avoid becoming a barrier to digitization, cybersecurity teams will have to change their operating models to adopt agile practices and focus on developer experience.CYBERSECURITY AND DIGITIZATIONEvery aspect of the digital enterprise has important cybersecurity implications. As companies seek to create more digital customer experiences, they need to determine how to align fraudsecurity, and product development organizations to design controls (e.g. authentication) that create experiences that are both convenient and secure. As companies adopt massive data analytics, they must determine how to identify risks created by data sets that integrate many types of incredibly sensitive customer information in one place. They must also develop solutions for incorporating security controls into analytic solutions that may not use a formal software development methodology. As companies leverage Robotic Process Automation (RPA), they must effectively manage bot credentials and make sure that "boundary cases" don't introduce security risks.Likewise, as companies build API ecosystems for external customers, they must determine how to identify vulnerabilities created by interactions between many APIs and services, and build and enforce standards for appropriate developer access. Further, they must continue to maintain diligence in application security even as they transition from waterfall to agile application development.CHALLENGES WITH EXISTING CYBERSECURITY MODELSIn most companies, CIOs, CISOs, and their teams have sought to establish cybersecurity as an enterprise-grade service. What does that mean? They have consolidated DOES THE DIGITAL ENTERPRISE REQUIRE AGILE SECURITY?By James M. Kaplan, Partner and Co-leader, McKinsey & CompanyTJames M. Kaplan
<
Page 7 |
Page 9 >
