Cyber Security: awareness and visions

Are we ready to face cyber challenges?

The new challenges in terms of governance and cyber security are confronting companies with strategic choices for the future. Only the most virtuous organisations have managed to invest in the face of the real risks that occurred in 2022, but which, like all security investments, have an ROI that is not always easily calculated.
Some choices continue to be driven by the emergency and/or alleged "gurus" riding the tigers of cyber fears, turning from security experts into cyber professionals.
All this while the unstoppable digital revolution is underway, indeed it has already happened, and the acquisition of data and information is constantly growing. The focus is on the new OpenAI intelligent chapt engine, which is actually scary and confusing. We accept everything from the net, while the big ones announce continuous cuts of the staff (Microsoft -10.000, Amazon -18.000, Salesforce-8.000, Twitter -3700): sign that the revolution is changing objectives.

While this happens, the choices of some large industrial groups and critical infrastructures and public administrations, are oriented in contrast to their own strategies that speak of digitalization, sustainability, remote maintenance; statements of principle refuted by now obsolete criteria for qualification and selection of suppliers, by an obtuse mode of identification of security technologies , by the repetition of digital and no longer sustainable service models, by questionable design and certification methods. Choices that stifle the wings of change and digitalization exposing networks and services to attacks and that, in the face of investments in cyber, make nothing effective; access through traditional services and security systems directly to networks is very simple, banal and dangerous; we will soon discover then that the tiger is ridden in some cases by riders improvised in the face of cyberwar cd.
This is the case of the now stale theme of Chinese cameras banned by many and used by all, "Chinese cameras spy on us" reminiscent of the old cliché of the 90s "the Chinese never die". The escalation of the understandable US trade war CHINA, in banning the products of the Asian giant, refers to the future legitimizing the past as already authorized. In essence it is only a correct, strategic, policy of protection from economic risk in a political and economic context of conflict.

The camera alone is harmless, say the USA, but from now on we will use only non-Chinese products; yet we continue to hide behind this declarative fashion, since there is no other strategy, while then you continue to select security player using the parameters of price, quantity, small army, perhaps filling their facilities with Chinese cameras banned in official statements and documents, but cheaper, unique available, sometimes the most reliable.
Qualitative product selection strategies, adequate production capacity and supply, resilient, serve today to support the protection of new digital environments by mitigating risks not in a generic way but classifying them according to different levels of criticality/ severity.
Digital environments must be safe, more than safe and certified, but through a safety assessment made on specific and objective criteria; any technological solution in addition to being certified must be reliable. But how to use it? by whom? in what security conditions, with what skills, training? These are the questions today: cybertechnology and the security and management of platforms must be linked to innovation in the use of the services that access them, in the modes of management, because technology remains a commodity and the expertise in use is a value that grows with investments, training, new awareness. Cyber consistency, awareness, Security: alas maybe we are behind!!

Giuseppe Calabrese, CEO Secursat