Eva Chen, CEO and Co-founder of Trend Micro, used a keynote at the recent Black Hat USA AI Summit to say that cybersecurity should never come at the expense of business continuity, organizational agility, and progress.
“As ownership of cybersecurity shifted from IT operations to the SOC, the gap widened between the goals of cybersecurity and the business. The CrowdStrike outage is symptomatic of this imbalance. Organizations and the vendor community must realign security goals to better support business continuity and deliver sustainable security and business operations. And as an industry, we need to think more creatively about how to support these requirements,” said Ms. Chen.
During her keynote Ms. Chen shared insights ‘gleaned from thousands of enterprise customers, highlighting a lack of alignment with the concerns of the business, irresponsible quality assurance (QA) processes, and a one-size-fits-all approach from endpoint security vendors that ultimately culminated in the CrowdStrike global catastrophic failure.
According to Ms. Chen:
- Among global enterprises and the wider vendor community, cyber must go beyond detection to also take account of availability and business continuity requirements. For many SOC teams, this journey has already begun—by framing cyber in terms of holistic business risk mitigation.
- On the endpoint, there is opportunity and progress required, with most vendors persisting with rigid, single-agent approaches that can amplify business continuity risk. Endpoint, server and workloads have unique risk profiles and require specialized protection.
- The need for industry change is even more acute as AI becomes integrated deeper into IT and business operations. Against this backdrop security and business continuity must advance in lockstep or risk future catastrophic events like the CrowdStrike one.
