enterprise it security - summary of trends to watch in 2014

Contact: Bill Chamberlin, HorizonWatching Community Leader

January 2014

Enterprise I.T. Security: Summary of Trends To Watch In 2014 A HorizonWatching Community Trend Summary Report

© 2014 HorizonWatching

Creative Commons Attribution License

HorizonWatching Community

About This Deliverable

2 Enterprise IT Security: A 2014 HorizonWatching Trend Report (summary) Jan 2014

Purpose: The slides provide information about the Enterprise I.T. Security trend in 2014

This is a Summary Version of this Trend Report.

It can be downloaded at http://www.slideshare.net/horizonwatching

A more detailed version of this deck is located at

http://www.billchamberlin.com/reports-books/. It has many more resources for you,

including a list of over 65 articles related to Security trends for 2014.

Content: Summary information about this emerging trend is provided along with many links

to additional resources. The slides are meant to be read/studied and the links are there for

you to continue your learning. You may want to view the slides in slideshow mode so you

can easily follow the links

Other HorizonWatching Trend Reports: Are announced/discussed on the

HorizonWatching blog

HorizonWatching Community: For more on the HorizonWatching community please see

the HorizonWatching blog

Note: This presentation represents my own personal thoughts and ideas….not those of my employer.

- Bill Chamberlin, http://www.billchamberlin.com/

http://www.slideshare.net/horizonwatching

http://www.billchamberlin.com/reports-books/



http://www.billchamberlin.com/






Table of Contents

1. 12 Trends to Watch in 2014

2. What Others Are Saying About Security for 2014

3. Additional Resources





Table of Contents








12 Enterprise IT Security Trends to Watch in 2014

1. “Target”ed Attacks: Expect more targeted and coordinated

attacks (like we saw at Target) that are successful in disrupting

service and fraudulently obtaining significant amounts of

intellectual property.

2. CISO Role: As a result of attacks, more enterprises will

institute the Chief Information Security Officer role and task them

with developing a corporate wide security strategy.

3. More Complexity: IT Security continues to become very

complex, thanks to the ‘third platform” of mobile, social, big data,

and cloud. Enterprises must guard against both theft of data,

fraud, etc. and hacking into systems and infrastructures.. Security

skills will be in high demand.

4. Encryption: Expect a huge interest in encryption technologies

as enterprises realize that unencrypted data traffic behind the

firewall is vulnerable to detection from outsiders.

5. Biometrics: The acceptance of biometrics has been very

gradual. In 2014, we will see increased adoption of biometrics as

a way to transition from the traditional user ID/password

combination used most frequently to verify online identities.

6. Internet of Things: Need to secure enterprise systems

against unwelcome access by Sensors, M2M Devices,

Wearables and Embedded Systems.


Study: IBM Cyber Security

Intelligence Index

Source: HorizonWatch, IBM Market Insights

https://www14.software.ibm.com/webapp/iwm/web/signup.do?source=gts-LITS-bus-conn-NA&S_PKG=ov12561&S_TACT=601CC26W

https://www14.software.ibm.com/webapp/iwm/web/signup.do?source=gts-LITS-bus-conn-NA&S_PKG=ov12561&S_TACT=601CC26W




12 Enterprise IT Security Trends to Watch in 2014 (cont.)

7. Security Automation: Enterprises will invest in better

security management facilities, the use of analytics and

intelligence to identify trends and usage patterns, and the

ability to monitor, report, and act on security intelligence.

8. Smarter Malware: Malicious code authors are very

adept at camouflaging their work. They will get smarter in

2014. Expect mobile to be a target.

9. Mobile Threats: Mobile usage overtakes PCs. Mobile

security platform weaknesses are giving rise to new threats.

In 2014 hackers/criminals will increasingly target Mobile

email, apps, platforms, wallets, and app stores.

10. BYOWearables: Employees will be bringing their Smart

Glasses, Watches, and Health Monitors to work with them,

causing more complexity for I.T. Security professionals.

11. Device & Location Important: Enterprises begin

analyzing both device and location information to help them

understand the potential context of the user’s attempt to

access the network.

12. BYOS: Expect a rise in “bring your own security”

scenarios, in which employees using their own mobile

devices for work also employ their own personal security

measures – often without the consent or awareness of

enterprise security managers.


Gartner Webinar: Top Security Trends and

Takeaways for 2014

Source: HorizonWatch, IBM Market Insights

http://my.gartner.com/portal/server.pt?open=512&objID=202&mode=2&PageID=5553&ref=webinar-rss&resId=2645019&srcId=1-3074228965

http://my.gartner.com/portal/server.pt?open=512&objID=202&mode=2&PageID=5553&ref=webinar-rss&resId=2645019&srcId=1-3074228965




Table of Contents








Cybersecurity is perhaps the most critical of all IT trends, especially for Governments…


“Improving our cyber resilience

includes: hardening our digital

infrastructure to be more resistant to

penetration and disruption; improving

our ability to defend against

sophisticated and agile cyber threats;

and recovering quickly from cyber

incidents—whether caused by malicious

activity, accident, or natural disaster.” – whitehouse.gov (link)

GEN Keith Alexander, Director of the National Security

Agency and Commander of U.S. Cyber Command

delivers the keynote address at 4th Annual Billington

Cybersecurity Summit in Washington, DC.

“Imagine if someone tried to break into

your house. Now imagine it happens

60,000 times a day.” – IBM (link)

Video: Cybersecurity Summit

http://www.whitehouse.gov/issues/foreign-policy/cybersecurity

http://www.ibm.com/smarterplanet/ie/en/business_resilience_management/overview/index.html?

https://www.youtube.com/watch?v=N07bhGiibag







…However, the top I.T. Analyst firms do not call it out as a critical part of the new computing platform


IDC: 2014 Predictions by Frank Gens Gartner: 2013 Gartner Symposium / Itxpo Keynote

https://www.youtube.com/watch?v=pMQXV5Mukto

https://www.youtube.com/watch?v=J3JX84qEj-Q







In 2014, we can expect more of the same security breaches that we saw in 2013, further elevating Security to board level discussions.


IT Security in the

Snowden Era – ZDNet

For Target, the Breach Numbers Grow

– The New York Times

Security Breach Exposes 2.9 Million Adobe Users

– Forbes

4 Million Patients At Risk After Computer Theft

From Chicago Medical Group – Dark READING

http://www.zdnet.com/topic-it-security-in-the-snowden-era/

http://www.zdnet.com/topic-it-security-in-the-snowden-era/

http://www.nytimes.com/2014/01/11/business/target-breach-affected-70-million-customers.html

http://www.cnbc.com/id/101297281

http://www.darkreading.com/attacks-breaches/4-million-patients-at-risk-after-compute/240160518

http://www.darkreading.com/attacks-breaches/4-million-patients-at-risk-after-compute/240160518




Consumerization, social, mobile, cloud, big data and IoT are all contributing an increased risk of security and data breaches


Infographic Sourced from IBM (link)

“With continuing trends in cloud,

consumerization, mobility and the

"next big thing", the way IT is

delivered is changing. Each brings

new threats and breaks old security

processes.”– Gartner (link)

“Information security must evolve from just an IT project to the core of critical business

decisions. You must protect enterprise data from compromise and drive innovation at the

same time.” – Gartner (link)

“We’re in a perfect IT security storm.

Hackers are more sophisticated, your

data is increasingly accessed anytime

and anywhere and often resides in

the cloud.” – IBM (link)

“Increasing use of cloud-based services, user

mobility and multiple devices is adding

complexity to security, particularly identity

management requirements.” – Ovum (link)

http://www-935.ibm.com/services/us/en/security/infographic/cybersecurityindex.html

http://my.gartner.com/webinardetail/resId=2531415&srcId=1-2913883026&pcp=wb_rl_srm

http://www.gartner.com/technology/topics/information-security.jsp

http://www-03.ibm.com/security/cybersecurity/

http://www-03.ibm.com/software/products/en/category/SWI00

http://ovum.com/press_releases/ovum-declares-2014-a-time-for-proactive-protection-to-address-cyber-security-time-bomb/




Social, Mobile/BYOD, Big Data, Analytics, Cloud and IoT will all put more stress on Security Proffesionals in for 2014


IDC Worldwide Security Predictions 2014: The

New Value of Security Paranoia – IDC Cybersecurity in 2014: A roundup of

predictions - ZDNet

The Year Ahead in Cyber Security:

What You Need To Know - Forbes Note: More 2014 Security trend

articles and related information

available via the Horizonwatching Blog

http://www.idc.com/getdoc.jsp?containerId=IDC_P29869



http://www.zdnet.com/cybersecurity-in-2014-a-roundup-of-predictions-7000023729/




http://www.forbes.com/sites/karstenstrauss/2013/12/22/the-year-ahead-in-cyber-security-what-you-need-to-know/

http://www.forbes.com/sites/karstenstrauss/2013/12/22/the-year-ahead-in-cyber-security-what-you-need-to-know/

http://www.billchamberlin.com/horizonwatching-blog-2/




The Security trend is a long term trend that just continues to grow in importance and size.


“The cloud-based security services market will be worth $2.1 billion in 2013, rising to $3.1

billion in 2015.” – Gartner (link)

Top Security Trends and Takeaways for

2014 – Gartner Webinar (registration required) “The worldwide security technology and services

market is forecast to reach $67.2 billion in 2013,

up 8.7 percent from $61.8 billion in 2012,

according to Gartner, Inc. The market is

expected to grow to more than $86 billion in

2016.” – Gartner (link)

“Security products did well in 2012, with growth of 6.5%. A more difficult threat

environment and changing technology landscape brought on by consumerization, mobility,

and cloud computing require continued investment in security. For the forecast period, we

expect security product revenue to grow at a CAGR of 7.1%” – IDC (link)

“Cyber security spending for critical

infrastructure will hit $46 billion globally by the

end of 2013.” – ABI Research (link)

http://www.gartner.com/newsroom/id/2616115

http://my.gartner.com/portal/server.pt?open=512&objID=202&mode=2&PageID=5553&ref=webinar-rss&resId=2531415









http://www.gartner.com/newsroom/id/2512215

http://www.idc.com/getdoc.jsp?containerId=245102

https://www.abiresearch.com/press/cyber-security-spending-in-critical-infrastructure




Each year, security professionals are faced with new challenges as each new emerging technology opens up new risks.


“In 2014, cyber espionage and state-sponsored threats will continue to make headlines, but

the concerning underlying trend is that similar technology can and will be used against

ordinary businesses.” – CIO.com (link)

“Context-aware security and

security intelligence are

becoming critical to the

effectiveness of future security

technologies.” – Gartner (link)

What is Security Intelligence? - IBM

“An ever-increasing number of

devices and growing volumes of

data can make it difficult to

develop and deploy effective

cyber security measures.” – IBM

(link)

http://www.cio.com/article/696921/Security_Minefield_Bring_Your_Own_Device_Will_Bedevil_IT_Security_in_2012

http://www.gartner.com/DisplayDocument?doc_cd=255617

https://www.youtube.com/watch?v=dLCHQJYqQR4

http://public.dhe.ibm.com/common/ssi/ecm/en/sew03031usen/SEW03031USEN.PDF




Table of Contents








Security – IBM Resources and Links


ibm.com links • IBM Security: http://www.ibm.com/security/

• Smarter Planet: Security and Resillience

• Smarter Computing: Security

• Services: IT Security Services , Secure Engineering

• Software: IBM Security

• Cloud Computing: Cloud Security

• developerWorks: Security

• IBM Institute for Advanced Security

• x-Force: X-Force

IBM Social Media Platforms • Twitter: @ibmsecurity, @InstituteAdvSec

• Twitter Hashtag: #ibmsecurity

• Blogs: Security Intelligence Blog, IBM Institute for Advanced

Security, and IBM Application Security Insider , and X-Force

• YouTube: IBM Security

• LinkedIn Group: IBM Security

• Slideshare: IBM decks tagged Security and Resilience

• Community: IBM Institute for Advanced Security

Twitter: @ibmsecurity

http://www.ibm.com/security/

http://www.ibm.com/smarterplanet/us/en/business_resilience_management/overview/

http://www.ibm.com/smarterplanet/us/en/business_resilience_management/overview/

http://www.ibm.com/smarter-computing/us/en/data-security/

http://www-935.ibm.com/services/us/en/it-services/security-services.html

http://www-03.ibm.com/security/secure-engineering/

http://www-142.ibm.com/software/products/us/en/category/SWI00

http://www-03.ibm.com/security/cloud-security.html

http://www.ibm.com/developerworks/security/

http://instituteforadvancedsecurity.com/

http://www-03.ibm.com/security/xforce/



http://twitter.com/

https://twitter.com/ibmsecurity

https://twitter.com/InstituteAdvSec

https://twitter.com/InstituteAdvSec

https://twitter.com/search?q=

https://twitter.com/search?q=

http://securityintelligence.com/

http://instituteforadvancedsecurity.com/ias-blogs/default.aspx

http://instituteforadvancedsecurity.com/ias-blogs/default.aspx

http://blog.watchfire.com/

http://blogs.iss.net/



http://www.youtube.com/ibmsecuritysolutions

http://www.linkedin.com/groups?gid=1846255

http://www.slideshare.net/ibm/tagged/IBM: Security and Resilience

http://instituteforadvancedsecurity.com/

http://www.instituteforadvancedsecurity.com/wapp/members/

http://twitter.com/

https://twitter.com/ibmsecurity




Enterprise IT Security: a more detailed version of this report is available for those wanting to better understand this trend


Note: My content represents my thoughts and ideas….not those of my employer. Follow me for more

technology trend information on my public blog - HorizonWatching at www.billchamberlin.com.

Thanks, Bill Chamberlin

Features of the detailed version:

– Powerpoint format with speaker notes.

– 11 additional slides not found in this report:

• One Page Summary of Security Trend

• Selected Analyst Resources

• Selected Media Websites

• Selected IT Vendor & Consultant Websites

• Selected Social Media Sites

• Selected Experts and Online Influencers

• Other Selected Reports from the 2012 Report

• 65 Trend and Prediction Articles

– Available at http://www.billchamberlin.com/reports-books/

To access the detailed

version of this report,

go to Enterprise IT

Security Trends To

Watch In 2014






http://www.billchamberlin.com/downloads/enterprise-it-security-trends-to-watch-in-2014/






More Research is available on 2014 Trends


Other HorizonWatching Content and Community Sites – Linkedin Profile = www.linkedin.com/in/whchamb/

– Wordpress = Horizonwatching – Thought Leadership Blog

– Tumblr = HorizonWatching – Quote Blog

– Twitter = HorizonWatching – 140 Character Blog

– Slideshare = HorizonWatching - Slide Decks

– Facebook = HorizonWatching – Community Page

– LinkedIn Group = HorizonWatching – Community Group

More Trend Reports Available

• Available at http://www.billchamberlin.com/reports-books/

• Typically 20-30 pages (Powerpoint format).

• All will be available by mid-February. For the current status of the availability of the

reports, see Availability of HorizonWatching 2014 Trend Reports

Note: My content represents my thoughts and ideas….not those of my employer. Follow me for more

technology trend information on my public blog - HorizonWatching at www.billchamberlin.com.

Thanks, Bill Chamberlin

http://www.linkedin.com/in/whchamb/

http://www.billchamberlin.com/horizonwatching-blog-2/

http://horizonwatching.tumblr.com/

http://twitter.com/horizonwatching

http://www.slideshare.net/HorizonWatching

http://www.facebook.com/pages/HorizonWatching/171883855681

http://www.linkedin.com/groups?about=&gid=1817327&trk=anet_ug_grppro




http://www.billchamberlin.com/availability-of-horizonwatching-2014-trend-reports/






enterprise it security - summary of trends to watch in 2014

Technology

technology

ibm market

top security

public blog

additional

ibm institute

powerpoint

bill chamberlin